VulnerabilityModified
CVE-2005-1205
The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.
MEDIUM 5.0EPSS 33.0%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 33.0%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 33.03% probability · 98th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/windows 2003 server
- Source
- secure@microsoft.com
References
- http://idefense.com/application/poi/display?id=260&type=vulnerabilitiesPatch, Vendor Advisory
- http://secunia.com/advisories/15690/Patch, Vendor Advisory
- http://securitytracker.com/id?1014203
- http://www.kb.cert.org/vuls/id/800829Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/13940
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-033
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1132
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A605
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A784
- http://idefense.com/application/poi/display?id=260&type=vulnerabilitiesPatch, Vendor Advisory
- http://secunia.com/advisories/15690/Patch, Vendor Advisory
- http://securitytracker.com/id?1014203
- http://www.kb.cert.org/vuls/id/800829Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/13940
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-033
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1132
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A605
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A784
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.