CVE-2005-0488Disclosure(microsoft / kerberos_5)

LOWCVSS 5.0 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.

microsoft CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

Vendor / third-party advisories

Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

kerberos_5
sunos
telnet_client

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

microsoft mit sun

Products

kerberos_5sunostelnet_client

3 versions affected across 3 products

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://www.openwall.com/lists/oss-security/2026/03/13/1

Full discourse1 post

Open Source Security mailing list@oss_security208d
Disclosure
CVE-2005-0488: Some telnet clients still leak environment variables https://www.openwall.com/lists/oss-security/2026/03/13/1 Vulnerable: GNU Inetutils 2.7.33 (Debian, Ubuntu, Termux, ...), FreeBSD 16.0-CURRENT, NetBSD 11.0-RC2, Solaris 11.4. By-design partial leakage: OpenBSD 7.8. Abuse via telnet:// URI scheme.
Post summary
The text announces the discovery of CVE‑2005‑0488, detailing affected telnet client versions and the nature of the environment variable leakage, without providing PoC, exploit code, or patch information.
010531.6K
4.4K followersView on X

CPE platform detail3 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

3 of 3 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	telnet_client	5.1.2600.2180	-	-
App	mit	kerberos_5	1.3.4	-	-
OS	sun	sunos	5.9	-	-

Explore more

Back to dashboard microsoft CVEs mit CVEs sun CVEs kerberos_5 vulnerabilities