CVE-2009-1930

EXPLOITED

Microsoft Windows - Remote Code Execution via Telnet Credential Reflection

Title source: llm

Exploitation Summary

CVE-2009-1930 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, aka "Telnet Credential Reflection Vulnerability," a related issue to CVE-2000-0834.

References (8)

Core 8

Core References

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2009/2237

Patch vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/35993

US Government Resource third-party-advisory x_refsource_cert

http://www.us-cert.gov/cas/techalerts/TA09-223A.html

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-042

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1022716

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6302

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/36222

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/56904

Scores

EPSS 0.4139

EPSS Percentile 98.5%

Details

VulnCheck KEV 2010-05-01

CWE

CWE-255

Status published

Products (5)

microsoft/windows_2000

microsoft/windows_2003_server sp2 (3 CPE variants)

microsoft/windows_server_2008 (6 CPE variants)

microsoft/windows_vista (5 CPE variants)

microsoft/windows_xp (3 CPE variants)

Published Aug 12, 2009

Tracked Since Feb 18, 2026