Short Name |
TELNET:SVRRESP:MS-CLIENT-INFO |
---|---|
Severity |
Medium |
Recommended |
No |
Category |
TELNET |
Keywords |
Microsoft Telnet Client Information Disclosure |
Release Date |
2005/06/13 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
This signature detects information disclosure attempts. Attackers can remotely read session variables for users who have an open connection to a malicious telnet server.
Telnet clients provided by multiple vendors are prone to a remote information-disclosure vulnerability. Attackers can retrieve any information stored in the environment of clients using the affected telnet application. The contents of the environment variables may be sensitive in nature, allowing attackers to gain information that may aid them in further attacks.