Celestial Software Absolutetelnet vulnerabilities

CVE-2003-1090 [CRITICAL] CVE-2003-1090: Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.

CVE-2020-37166 [MEDIUM] CWE-120 CVE-2020-37166: AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field tha AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to crash the application. Attackers can overwrite the username field with a 1000-byte buffer, causing the application to become unresponsive and terminate.

CVE-2020-37164 [MEDIUM] CWE-120 CVE-2020-37164: AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name. Attackers can generate a 2500-character payload and paste it into the license entry field to trigger an application crash.

CVE-2020-37165 [MEDIUM] CWE-120 CVE-2020-37165: AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name. Attackers can generate a 2500-character payload and paste it into the license name field to trigger an application crash.

CVE-2003-0046 [MEDIUM] CVE-2003-0046: AbsoluteTelnet SSH2 client does not clear logon credentials from memory, including plaintext passwor AbsoluteTelnet SSH2 client does not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.