Tracker / CVE-2005-0488
CVE-2005-0488
Medium 5.0
Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.
Affected products and versions
| microsoft | telnet_client |
|---|---|
| mit | kerberos_5 |
| sun | sunos |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.