CVE-2009-1930

Description

The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, aka "Telnet Credential Reflection Vulnerability," a related issue to CVE-2000-0834.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6302

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-042

http://www.vupen.com/english/advisories/2009/2237

http://www.us-cert.gov/cas/techalerts/TA09-223A.html

http://www.securityfocus.com/bid/35993

http://securitytracker.com/id?1022716

http://secunia.com/advisories/36222

http://osvdb.org/56904

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3