PT-2003-1331 · Absolutetelnet · Absolutetelnet

Knud Erik Højgaard · Publicado 2003-02-01 · Atualizado 2016-10-18 · CVE-2003-0046

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AbsoluteTelnet (affected versions not specified)

Description The issue concerns the AbsoluteTelnet SSH2 client, which fails to clear logon credentials from memory. This includes storing plaintext passwords in memory, making it possible for attackers with access to the memory to steal the SSH credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2003-0046

Produtos afetados

Absolutetelnet

Referências · 7

• http://securitytracker.com/id?1006013 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0046 · Nota de Segurança
• http://celestialsoftware.net/telnet/beta_software.html · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=104386492422014&w=2 · Nota
• http://securityfocus.com/bid/6725 · Nota
• http://osvdb.org/7686 · Nota
• http://idefense.com/advisory/01.28.03.txt · Aviso do Fabricante