Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
BDU:2014-00017 (CVE-1999-0619)
Vulnerability from fstec – Published: 2016-07-05 – Updated: 2017-06-21 – View on bdu.fstec.ru No remediation information
VLAI
Title
Уязвимость операционной системы Windows, позволяющая злоумышленнику перехватывать конфиденциальную информацию
Summary
Данные по протоколу telnet в операционной системе Windows передаются в незашифрованном виде, что позволяет удаленному злоумышленнику при помощи анализа сетевого трафика перехватывать конфиденциальную информацию, в том числе имена и пароли пользователей
Severity
Class
Architecture vulnerability
Status
Confirmed by the vendor
Exploitation
Information gathering
Incidents
Being clarified
Remediation
Being clarified
CWE
- CWE-5 - Ошибка в конфигурации J2EE: передача данных без шифрования
Aliases
References
1 reference
Impacted products
31 products
from 1 vendor
Vendors
Microsoft Corp
Products
Windows XP, Windows Server 2003, Windows Server 2003 Standart Edition RTM, Windows Server 2003 Service Pack 2, Windows Server 2003 R2, Windows Server 2003 R2 RTM, Windows Server 2003 R2 Service Pack 1, Windows Server 2003 R2 Service Pack 2, Windows Server 2008 R2 RTM, Windows Server 2008, Windows Server 2008 RTM, Windows Server 2012 RTM, Windows Vista, Windows Vista RTM, Windows Vista Service Pack 1, Windows Vista Service Pack 2, Windows 7, Windows 7 RTM, Windows 7 Service Pack 1, Windows 8, Windows 8 RTM, Windows XP Service Pack 1, Windows XP Service Pack 2, Windows XP Service Pack 3, Windows Server 2003 Service Pack 1, Windows Server 2008 Service Pack 2, Windows XP RTM, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Server 2008 R2 Service Pack 1
Versions
- (Windows XP), - (Windows Server 2003), - (Windows Server 2003 Standart Edition RTM), - (Windows Server 2003 Service Pack 2), - (Windows Server 2003 R2), - (Windows Server 2003 R2 RTM), - (Windows Server 2003 R2 Service Pack 1), - (Windows Server 2003 R2 Service Pack 2), - (Windows Server 2008 R2 RTM), - (Windows Server 2008), - (Windows Server 2008 RTM), - (Windows Server 2012 RTM), - (Windows Vista), - (Windows Vista RTM), - (Windows Vista Service Pack 1), - (Windows Vista Service Pack 2), - (Windows 7), - (Windows 7 RTM), - (Windows 7 Service Pack 1), - (Windows 8), - (Windows 8 RTM), - (Windows XP Service Pack 1), - (Windows XP Service Pack 2), - (Windows XP Service Pack 3), - (Windows Server 2003 Service Pack 1), - (Windows Server 2008 Service Pack 2), - (Windows XP RTM), - (Windows Server 2008 R2), - (Windows Server 2012), - (Windows Server 2012 R2), - (Windows Server 2008 R2 Service Pack 1)
Product types
Operating system
Platforms
Microsoft Corp Windows XP - 32-bit, Microsoft Corp Windows XP - 64-bit, Microsoft Corp Windows Server 2008 R2 RTM - 64-bit, Microsoft Corp Windows Server 2008 - 64-bit, Microsoft Corp Windows Server 2012 RTM - 64-bit, Microsoft Corp Windows Vista - 64-bit, Microsoft Corp Windows Vista RTM - 64-bit, Microsoft Corp Windows Vista Service Pack 1 - 64-bit, Microsoft Corp Windows Vista Service Pack 2 - 64-bit, Microsoft Corp Windows 7 - 64-bit, Microsoft Corp Windows 7 RTM - 64-bit, Microsoft Corp Windows 7 Service Pack 1 - 64-bit, Microsoft Corp Windows 8 - 64-bit, Microsoft Corp Windows 8 RTM - 64-bit, Microsoft Corp Windows XP Service Pack 1 - 64-bit, Microsoft Corp Windows XP Service Pack 2 - 64-bit, Microsoft Corp Windows XP Service Pack 3 - 64-bit, Microsoft Corp Windows Server 2003 Standart Edition RTM - 32-bit, Microsoft Corp Windows Server 2003 Service Pack 1 - 32-bit, Microsoft Corp Windows Server 2003 Service Pack 2 - 32-bit, Microsoft Corp Windows Server 2008 - 32-bit, Microsoft Corp Windows Server 2008 RTM - 32-bit, Microsoft Corp Windows Server 2008 Service Pack 2 - 32-bit, Microsoft Corp Windows Vista - 32-bit, Microsoft Corp Windows Vista RTM - 32-bit, Microsoft Corp Windows Vista Service Pack 1 - 32-bit, Microsoft Corp Windows Vista Service Pack 2 - 32-bit, Microsoft Corp Windows 7 - 32-bit, Microsoft Corp Windows 7 RTM - 32-bit, Microsoft Corp Windows 7 Service Pack 1 - 32-bit, Microsoft Corp Windows 8 - 32-bit, Microsoft Corp Windows 8 RTM - 32-bit, Microsoft Corp Windows XP RTM - 32-bit, Microsoft Corp Windows XP Service Pack 1 - x86 (x32 / IA-32), Microsoft Corp Windows XP Service Pack 2 - x86 (x32 / IA-32), Microsoft Corp Windows XP Service Pack 3 - x86 (x32 / IA-32), Microsoft Corp Windows Server 2003 - 32-bit, Microsoft Corp Windows Server 2008 R2 - 64-bit, Microsoft Corp Windows Server 2012 - 64-bit, Microsoft Corp Windows Server 2012 R2 - 64-bit, Microsoft Corp Windows Server 2008 R2 Service Pack 1 - 64-bit
Mitigations
Использование защищенных протоколов удаленного управления, шифрующих сетевой трафик
{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Microsoft Corp",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (Windows XP), - (Windows Server 2003), - (Windows Server 2003 Standart Edition RTM), - (Windows Server 2003 Service Pack 2), - (Windows Server 2003 R2), - (Windows Server 2003 R2 RTM), - (Windows Server 2003 R2 Service Pack 1), - (Windows Server 2003 R2 Service Pack 2), - (Windows Server 2008 R2 RTM), - (Windows Server 2008), - (Windows Server 2008 RTM), - (Windows Server 2012 RTM), - (Windows Vista), - (Windows Vista RTM), - (Windows Vista Service Pack 1), - (Windows Vista Service Pack 2), - (Windows 7), - (Windows 7 RTM), - (Windows 7 Service Pack 1), - (Windows 8), - (Windows 8 RTM), - (Windows XP Service Pack 1), - (Windows XP Service Pack 2), - (Windows XP Service Pack 3), - (Windows Server 2003 Service Pack 1), - (Windows Server 2008 Service Pack 2), - (Windows XP RTM), - (Windows Server 2008 R2), - (Windows Server 2012), - (Windows Server 2012 R2), - (Windows Server 2008 R2 Service Pack 1)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0448\u0438\u0444\u0440\u0443\u044e\u0449\u0438\u0445 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0442\u0440\u0430\u0444\u0438\u043a",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "01.01.1999",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "21.06.2017",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "05.07.2016",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2014-00017",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-1999-0619, OSVDB ID:221",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Windows XP, Windows Server 2003, Windows Server 2003 Standart Edition RTM, Windows Server 2003 Service Pack 2, Windows Server 2003 R2, Windows Server 2003 R2 RTM, Windows Server 2003 R2 Service Pack 1, Windows Server 2003 R2 Service Pack 2, Windows Server 2008 R2 RTM, Windows Server 2008, Windows Server 2008 RTM, Windows Server 2012 RTM, Windows Vista, Windows Vista RTM, Windows Vista Service Pack 1, Windows Vista Service Pack 2, Windows 7, Windows 7 RTM, Windows 7 Service Pack 1, Windows 8, Windows 8 RTM, Windows XP Service Pack 1, Windows XP Service Pack 2, Windows XP Service Pack 3, Windows Server 2003 Service Pack 1, Windows Server 2008 Service Pack 2, Windows XP RTM, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Server 2008 R2 Service Pack 1",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Microsoft Corp Windows XP - 32-bit, Microsoft Corp Windows XP - 64-bit, Microsoft Corp Windows Server 2008 R2 RTM - 64-bit, Microsoft Corp Windows Server 2008 - 64-bit, Microsoft Corp Windows Server 2012 RTM - 64-bit, Microsoft Corp Windows Vista - 64-bit, Microsoft Corp Windows Vista RTM - 64-bit, Microsoft Corp Windows Vista Service Pack 1 - 64-bit, Microsoft Corp Windows Vista Service Pack 2 - 64-bit, Microsoft Corp Windows 7 - 64-bit, Microsoft Corp Windows 7 RTM - 64-bit, Microsoft Corp Windows 7 Service Pack 1 - 64-bit, Microsoft Corp Windows 8 - 64-bit, Microsoft Corp Windows 8 RTM - 64-bit, Microsoft Corp Windows XP Service Pack 1 - 64-bit, Microsoft Corp Windows XP Service Pack 2 - 64-bit, Microsoft Corp Windows XP Service Pack 3 - 64-bit, Microsoft Corp Windows Server 2003 Standart Edition RTM - 32-bit, Microsoft Corp Windows Server 2003 Service Pack 1 - 32-bit, Microsoft Corp Windows Server 2003 Service Pack 2 - 32-bit, Microsoft Corp Windows Server 2008 - 32-bit, Microsoft Corp Windows Server 2008 RTM - 32-bit, Microsoft Corp Windows Server 2008 Service Pack 2 - 32-bit, Microsoft Corp Windows Vista - 32-bit, Microsoft Corp Windows Vista RTM - 32-bit, Microsoft Corp Windows Vista Service Pack 1 - 32-bit, Microsoft Corp Windows Vista Service Pack 2 - 32-bit, Microsoft Corp Windows 7 - 32-bit, Microsoft Corp Windows 7 RTM - 32-bit, Microsoft Corp Windows 7 Service Pack 1 - 32-bit, Microsoft Corp Windows 8 - 32-bit, Microsoft Corp Windows 8 RTM - 32-bit, Microsoft Corp Windows XP RTM - 32-bit, Microsoft Corp Windows XP Service Pack 1 - x86 (x32 / IA-32), Microsoft Corp Windows XP Service Pack 2 - x86 (x32 / IA-32), Microsoft Corp Windows XP Service Pack 3 - x86 (x32 / IA-32), Microsoft Corp Windows Server 2003 - 32-bit, Microsoft Corp Windows Server 2008 R2 - 64-bit, Microsoft Corp Windows Server 2012 - 64-bit, Microsoft Corp Windows Server 2012 R2 - 64-bit, Microsoft Corp Windows Server 2008 R2 Service Pack 1 - 64-bit",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 J2EE: \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0431\u0435\u0437 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f (CWE-5)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 telnet \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Windows \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442\u0441\u044f \u0432 \u043d\u0435\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0432\u0438\u0434\u0435, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438\u043c\u0435\u043d\u0430 \u0438 \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.faqs.org/rfcs/rfc854.html",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-5",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5)"
}