Intrusion PreventionMS.Telnet.Client.Information.Disclosure
Description
This indicates an attack attempt to exploit an Information Disclosure vulnerability in multiple vendor's Telnet clients.
The vulnerability is caused by an error in the software when handles malicious server commands. It may allow remote attackers to gain sensitive information from vulnerable systems.
Affected Products
Microsoft Telnet Client 5.1.2600.2180, Kerberos V5 Release 1.3.6 package, netkit-telnet package for all versions of RedHat Linux and possibly telnet clients in others distributions.
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Apply the appropriate patch from the vendors.
For Microsoft Windows apply the security patch to the system as given in the Microsoft Security Bulletin MS05-033.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 29691 |
| Created | Oct 21, 2011 |
| Updated | Apr 23, 2014 |
| Risk |
|
| CVE ID | CVE-2005-1205 |
| Exploit Prediction Score | 93.9% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |