The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.
| Software | From | Fixed in |
|---|---|---|
| microsoft / windows_2003_server | web | web.x |
| microsoft / windows_2003_server | enterprise | enterprise.x |
| microsoft / windows_2003_server | standard | standard.x |
| microsoft / windows_2003_server | r2 | r2.x |