Description
Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0, allows remote attackers to execute commands by spawning Telnet with a log file option on the command line and writing arbitrary code into an executable file which is later executed, aka a new variant of the Telnet Invocation vulnerability as described in CVE-2001-0150.
References
- VU#952611 third-party-advisory
- MS01-051 vendor-advisory
- ie-telnet-command-execution-variant(7260) vdb-entry
- M-024 third-party-advisory government-resource