Lucene search

MitreCVE-2000-0892

HistoryMar 09, 2002 - 5:00 a.m.

CVE-2000-0892

2002-03-0905:00:00

mitre

web.nvd.nist.gov

cve-2000-0892

telnet clients

environment variables

remote servers

telnet: url

sensitive information

nvd.

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.002

Percentile

59.0%

JSON

Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL.

Affected configurations

Nvd

Node

u_winu_win

Node

calderaopenlinux

VendorProductVersionCPE
u_winu_win*cpe:2.3:a:u_win:u_win:*:*:*:*:*:*:*:*
calderaopenlinux*cpe:2.3:o:caldera:openlinux:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
u_win	u_win	*	cpe:2.3:a:u_win:u_win::::::::
caldera	openlinux	*	cpe:2.3:o:caldera:openlinux::::::::

References

www.kb.cert.org/vuls/id/22404

exchange.xforce.ibmcloud.com/vulnerabilities/6644

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.002

Percentile

59.0%

JSON

Related for CVE-2000-0892