Important: Red Hat Security Advisory: krb5 security update

Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a networked authentication system that uses a trusted third party a KDC to...

security flaw

Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR command...

Critical: Red Hat Security Advisory: krb5 security update

Updated krb5 packages which fix multiple security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 26 Sep 2005 krb5-server packages have been added to this advisory for Red...

Microsoft Telnet Client Information Disclosure (MS05-033; CVE-2005-1205)

...

CVE-2002-1898

Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window...

Enterasys Vertical Horizon switches backdoor accounts

There is undocumented backdoor account tiger/tiger123, in addition some privileged control character combination are available to unprivileged user from console or telnet session...

Debian DSA-731-1 : krb4 - buffer overflows

Several problems have been discovered in telnet clients that could be exploited by malicious daemons the client connects to. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-0468 Gael Delalleau discovered a buffer overflow in the envoptadd function...

RHEL 2.1 / 3 / 4 : telnet (RHSA-2005:504)

Updated telnet packages that fix an information disclosure issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The telnet package provides a command line telnet client. Gael Delalleau discovered an information disclosure...

Multiple system telnet client information leak

Telnet server can request client's environment variables...

iDEFENSE Security Advisory 06.14.05: Multiple Vendor Telnet Client Information Disclosure Vulnerability

Multiple Vendor Telnet Client Information Disclosure Vulnerability iDEFENSE Security Advisory 06.14.05 www.idefense.com/application/poi/display?id=260&type=vulnerabilities June 14, 2005 I. BACKGROUND The TELNET protocol allows virtual network terminals to be connected to over the internet. The...

Microsoft Security Bulletin MS05-033 Vulnerability in Telnet Client Could Allow Information Disclosure (896428)

Microsoft Security Bulletin MS05-033 Vulnerability in Telnet Client Could Allow Information Disclosure 896428 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use a Microsoft Telnet client Impact of Vulnerability: Information Disclosure Maximum Severity...

telnet security update

CentOS Errata and Security Advisory CESA-2005:504-00 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-June/074033.html Affected packages: telnet telnet-server...

telnet security update

CentOS Errata and Security Advisory CESA-2005:504 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-June/074020.html https://lists.centos.org/pipermail/centos-announce/2005-June/074022.html...

CVE-2005-1205

The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR command...

CVE-2005-1205

The CVE-2005-1205 issue is a documented information-disclosure vulnerability in the Microsoft Telnet client across Windows XP, Windows Server 2003, and Windows Services for UNIX. Exploitation arises from handling the Telnet NEW-ENVIRON command (SEND ENV_USERVAR), allowing a remote attacker to rea...

CVE-2005-0488

Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR command...

CVE-2005-1205

The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR command...

CVE-2005-0488

Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR command...

DEBIAN-CVE-2005-0488

Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR command...

CVE-2005-0488

CVE-2005-0488 affects certain BSD-based Telnet clients (including those on Solaris and SuSE Linux). The issue allows a remote attacker to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command. The connected documents confirm the vulnerability description ...