Buffer Overflow in Microsoft Telnet

Reported February 7, 2002, byMicrosoft.

VERSIONS AFFECTED

DESCRIPTION
A buffer overrun vulnerability exists in Microsoft Telnet that lets anattacker execute arbitrary code on the vulnerable system. This vulnerabilitystems from an unchecked buffer in the code that processes the Telnet protocoloptions.

VENDOR RESPONSE

Thevendor, Microsoft, has released securitybulletin MS02-004to address this vulnerability and recommends that affected users apply theappropriate patch provided at Microsoft's Download Center. Users can also findthe Win2K fix for this vulnerability in Windows2000 Security Roll-up Package 1.

CREDIT
Discovered by Microsoft.