Search Results (6 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-37164 2 Celestial Software, Celestialsoftware 2 Absolutetelnet, Absolutetelnet 2026-02-19 6.2 Medium
AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name. Attackers can generate a 2500-character payload and paste it into the license entry field to trigger an application crash.
CVE-2020-37166 2 Celestial Software, Celestialsoftware 2 Absolutetelnet, Absolutetelnet 2026-02-19 6.2 Medium
AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to crash the application. Attackers can overwrite the username field with a 1000-byte buffer, causing the application to become unresponsive and terminate.
CVE-2020-37165 2 Celestial Software, Celestialsoftware 2 Absolutetelnet, Absolutetelnet 2026-02-19 6.2 Medium
AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name. Attackers can generate a 2500-character payload and paste it into the license name field to trigger an application crash.
CVE-2021-47764 2 Celestial Software, Celestialsoftware 2 Absolutetelnet, Absolutetelnet 2026-02-18 5.5 Medium
AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating DialUp connection and license name fields. Attackers can generate a 1000-character payload and paste it into specific input fields to trigger application crashes and force unexpected termination.
CVE-2003-1090 1 Celestial Software 1 Absolutetelnet 2025-04-03 N/A
Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.
CVE-2003-0046 1 Celestial Software 1 Absolutetelnet 2025-04-03 N/A
AbsoluteTelnet SSH2 client does not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.