Oval Definition:	oval:org.mitre.oval:def:605
Revision Date: 2011-05-16 Version: 45 Title: Server 2003 Telnet Environment Disclosure Vulnerability Description: The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2005-1205 Platform(s): Microsoft Windows Server 2003 Product(s): Services for UNIX Definition Synopsis Windows Server 2003 is installed AND a vulnerable version of telnet.exe exists for specific Windows configurations a vulnerable version of telnet.exe exists NOT Win2K/XP/2003 is patched AND 32-bit version of Windows or 64-bit (itanium architecture) version of Windows is installed 32-Bit version of Windows is installed OR a version of Windows for the ia64 architecture is installed AND the version of telnet.exe is less than 5.2.3790.329 OR for specific Windows configurations a vulnerable version of telnet.exe exists Win2K/XP/2003/Vista service pack 1 is installed AND 32-bit version of Windows or 64-bit (itanium architecture) version of Windows is installed 32-Bit version of Windows is installed OR a version of Windows for the ia64 architecture is installed AND the version of telnet.exe is less than 5.2.3790.2442 OR for 64-bit (x64 arch) Windows (gold edition) a vulnerable version of telnet.exe exists 64-Bit (x64 architecture) version of Windows is installed AND NOT Win2K/XP/2003 is patched AND the version of telnet.exe is less than 5.2.3790.2442 AND NOT the patch KB896428 is installed
BACK