Secunia

Gaël Delalleau has reported a weakness in Microsoft Windows, which can be exploited by malicious people to gain knowledge of various information.

The problem is caused due to a design error in the Telnet client when handling the NEW-ENVIRON
command. This can be exploited to gain knowledge of the session variables for a user, who has an open connection to a malicious Telnet server.

Successful exploitation requires that a user e.g. visits a malicious web site or is tricked into clicking a specially crafted link.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Gaël Delalleau

Changelog
Further details available in Customer Area

Original Advisory
MS05-033 (KB896428):
http://www.microsoft.com/technet/security/bulletin/ms05-033.mspx

iDEFENSE:
http://idefense.com/application/poi/display?id=260&type=vulnerabilities

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area