CVE:CVE-2009-1930
CNNVD:CNNVD-200908-139
Telnet协议是一个通信协议。
Telnet协议未正确地选择加入NTLM凭据反射保护以确保用户凭据不被反射回来并供用户使用。如果用户受骗连接到了恶意的Telnet服务器，就可能导致反射NTLM凭据并以当前用户的权限获得系统访问。
solution:Upgrade microsoft windows_2000 to a higher version than -:sp4,and avoid the version -:sp4; Upgrade microsoft windows_2003_server to a higher version than sp2,and avoid the version sp2; Upgrade microsoft windows_server_2008 to a higher version than *,*:sp2,-,-:sp2,and avoid the version *:sp2,-:sp2; Upgrade microsoft windows_vista to a higher version than *:sp1,*:sp2,-,-:sp1,-:sp2,and avoid the version *:sp1,*:sp2,-:sp1,-:sp2; Upgrade microsoft windows_xp to a higher version than *:sp2,-:sp2,-:sp3,and avoid the version *:sp2,-:sp2,-:sp3