medium6.2
CVE-2020-37166
AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to crash the application.
Impact
AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to crash the application. Attackers can overwrite the username field with a 1000-byte buffer, causing the application to become unresponsive and terminate.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Celestialsoftware | Absolutetelnet | Version 11.12 |