Description
AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to crash the application. Attackers can overwrite the username field with a 1000-byte buffer, causing the application to become unresponsive and terminate.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Celestial Software | AbsoluteTelnet | 11.12 | — |
References
- ExploitDB-48010 exploit
- Vendor Homepage product
- VulnCheck Advisory: AbsoluteTelnet 11.12 - 'SSH2/username' Denial of Service third-party-advisory