PT-2015-1289
CVE-2015-0014
·
Published
2015-01-13
·
Updated
2019-02-26
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Microsoft Windows Server 2003 SP2
Microsoft Windows Vista SP2
Microsoft Windows Server 2008 SP2 and R2 SP1
Microsoft Windows 7 SP1
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012 Gold and R2
Description
The issue is related to a buffer overflow error in the Telnet service of the Windows operating system. This can be exploited by a remote attacker to execute arbitrary code by sending specially crafted network packets.
Recommendations
For Microsoft Windows Server 2003 SP2, update to a newer version to mitigate the risk.
For Microsoft Windows Vista SP2, update to a newer version to mitigate the risk.
For Microsoft Windows Server 2008 SP2 and R2 SP1, update to a newer version to mitigate the risk.
For Microsoft Windows 7 SP1, update to a newer version to mitigate the risk.
For Microsoft Windows 8, update to a newer version to mitigate the risk.
For Microsoft Windows 8.1, update to a newer version to mitigate the risk.
For Microsoft Windows Server 2012 Gold and R2, update to a newer version to mitigate the risk.
As a temporary workaround, consider disabling the Telnet service until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾