NVD

Id
66245  
Name
CVE-2005-0488  
Description
Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2005-06-14  
Modified Date
2011-03-07  
Seq
2005-0488  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
344934 66245 CVE-2005-0488 20050614 Multiple Vendor Telnet Client Information Disclosure Vulnerability  View
344935 66245 CVE-2005-0488 APPLE-SA-2006-08-01  View
344936 66245 CVE-2005-0488 oval:org.mitre.oval:def:11373  View
344937 66245 CVE-2005-0488 oval:org.mitre.oval:def:1139  View
344938 66245 CVE-2005-0488 1014203  View
344939 66245 CVE-2005-0488 101665  View
344940 66245 CVE-2005-0488 101671  View
344941 66245 CVE-2005-0488 57755  View
344942 66245 CVE-2005-0488 57761  View
344943 66245 CVE-2005-0488 VU#800829  View
344944 66245 CVE-2005-0488 SUSE-SR:2005:016  View
344945 66245 CVE-2005-0488 RHSA-2005:504  View
344946 66245 CVE-2005-0488 RHSA-2005:562  View
344947 66245 CVE-2005-0488 13940  View
344948 66245 CVE-2005-0488 19289  View
344949 66245 CVE-2005-0488 TA06-214A  View
344950 66245 CVE-2005-0488 ADV-2006-3101  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62178 JVNDB-2005-000380 複数ベンダ製品の Telnet クライアントにおける環境変数漏洩の脆弱性 多くの製品に同梱されている Telnet クライアントには、NEW-ENVIRON コマンドにより Telnet サーバに送信される環境変数の制限が不適切であるため、不正に環境変数の情報が奪取されてしまう問題が存在します。 CVE-2005-0488 11692 CVE-2005-0488 66245 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000380.html 2005-06-14 2007-07-24 View