Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2005:504
HistoryJun 14, 2005 - 8:30 p.m.

telnet security update

2005-06-1420:30:21
CentOS Project
lists.centos.org
50

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.011 Low

EPSS

Percentile

84.6%

JSON

CentOS Errata and Security Advisory CESA-2005:504

The telnet package provides a command line telnet client.

Gael Delalleau discovered an information disclosure issue in the way the
telnet client handles messages from a server. An attacker could construct
a malicious telnet server that collects information from the environment of
any victim who connects to it. The Common Vulnerabilities and Exposures
project (cve.mitre.org) has assigned the name CAN-2005-0488 to this issue.

Users of telnet should upgrade to this updated package, which contains a
backported patch to correct this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2005-June/074020.html
https://lists.centos.org/pipermail/centos-announce/2005-June/074022.html
https://lists.centos.org/pipermail/centos-announce/2005-June/074023.html
https://lists.centos.org/pipermail/centos-announce/2005-June/074026.html
https://lists.centos.org/pipermail/centos-announce/2005-June/074027.html
https://lists.centos.org/pipermail/centos-announce/2005-June/074029.html
https://lists.centos.org/pipermail/centos-announce/2005-June/074031.html

Affected packages:
telnet
telnet-server

Upstream details at:
https://access.redhat.com/errata/RHSA-2005:504

Related

nessus 11
centos 4
nvd 1
f5 2
redhat 3
debiancve 1
cve 1
cvelist 1
ubuntucve 1
securityvulns 1
cert 1
openvas 8
nessus
nessus
CentOS 3 / 4 : telnet (CESA-2005:504)
2006-07-03 00:00:00
RHEL 2.1 / 3 / 4 : telnet (RHSA-2005:504)
2005-06-16 00:00:00
MS05-033: Vulnerability in Telnet Client Could Allow Information Disclosure (896428)
2005-06-14 00:00:00
centos
centos
telnet security update
2005-06-14 23:05:19
krb5 security update
2005-07-12 23:06:13
krb5 security update
2005-07-13 00:28:39
nvd
nvd
CVE-2005-0488
2005-06-14 04:00:00
f5
f5
SOL4616 - BSD telnet environment vulnerability CAN-2005-0488
2005-07-21 00:00:00
BSD telnet environment vulnerability CAN-2005-0488
2005-07-22 04:00:00
redhat
redhat
(RHSA-2005:504) telnet security update
2005-06-14 00:00:00
(RHSA-2005:562) krb5 security update
2005-07-12 00:00:00
(RHSA-2005:567) krb5 security update
2005-07-12 00:00:00
debiancve
debiancve
CVE-2005-0488
2005-06-14 04:00:00
cve
cve
CVE-2005-0488
2005-06-14 04:00:00
cvelist
cvelist
CVE-2005-0488
2005-06-14 04:00:00
ubuntucve
ubuntucve
CVE-2005-0488
2005-06-14 00:00:00
securityvulns
securityvulns
iDEFENSE Security Advisory 06.14.05: Multiple Vendor Telnet Client Information Disclosure Vulnerability
2005-06-15 00:00:00
cert
cert
Telnet Client Information Disclosure Vulnerability
2005-06-14 00:00:00
openvas
openvas
Solaris Update for telnet 119433-01
2009-06-03 00:00:00
Solaris Update for telnet 119434-01
2009-06-03 00:00:00
Solaris Update for telnet 110669-05
2009-06-03 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.011 Low

EPSS

Percentile

84.6%

JSON
Related for CESA-2005:504
nessus11centos4nvd1f52redhat3debiancve1cve1cvelist1ubuntucve1securityvulns1cert1openvas8