Microsoft security update 896428 (MS05-033) limits the environment variables that the Telnet client can disclose in Microsoft Windows Server 2003 and in Microsoft Windows XP. However, the security update also adds a new registry key that lets you specify additional environment variables that the Telnet client can disclose.
Security update 896428 adds the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\TelnetClient\AllowedEnvVariables
By default, the Telnet client lets the server request only the following environment variables:
| • | USER
|
| • | DISPLAY
|
| • | SYSTEMTYPE |
| • |
ACCT
|
| • | JOB |
| • | PRINTER |
| • | SFUTLNTMODE
|
| • | SFUTLNTVER
|
You can use the AllowedEnvVariables registry key to specify additional environment variables that can be disclosed by the Telnet client. The new key is created as a MULTI_SZ registry value.
Help and Support
Back to the top
