oval:org.mitre.oval:def:1132

Definition Id: oval:org.mitre.oval:def:1132

Oval ID:	oval:org.mitre.oval:def:1132
Title:	Windows XP Telnet Environment Disclosure Vulnerability
Description:	The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2005-1205	Version:	7
Platform(s):	Microsoft Windows XP	Product(s):	Services for UNIX
Definition Synopsis:
Windows XP is installed AND a vulnerable version of telnet.exe exists for specific Windows configurations a vulnerable version of telnet.exe exists 32-bit version of Windows or 64-bit (itanium architecture) version of Windows is installed 32-Bit version of Windows is installed AND a version of Windows for the ia64 architecture is installed AND Win2K/XP/2003/Vista service pack 1 is installed AND the version of telnet.exe is less than 5.1.2600.1684 OR 32-bit version of windows with SP2 is installed and vulnerable version of telnet.exe exists the version of telnet.exe is less than 5.1.2600.2674 AND 32-Bit version of Windows is installed AND Win2K/XP/2003/Vista/2008 Service Pack 2 is installed OR for 64-bit (x64 arch) Windows (gold edition) a vulnerable version of telnet.exe exists 64-Bit (x64 architecture) version of Windows is installed AND NOT Win2K/XP/2003 is patched AND the version of telnet.exe is less than 5.2.3790.2442