Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Telnet_client | Microsoft | 5.1.2600.2180 (including) | 5.1.2600.2180 (including) |
| Kerberos_5 | Mit | 1.3.4 (including) | 1.3.4 (including) |
| Red Hat Enterprise Linux 3 | RedHat | telnet-1:0.17-26.EL3.3 | * |
| Red Hat Enterprise Linux 3 | RedHat | krb5-0:1.2.7-47 | * |
| Red Hat Enterprise Linux 4 | RedHat | telnet-1:0.17-31.EL4.3 | * |