PT-2003-1331 · Absolutetelnet · Absolutetelnet

Knud Erik Højgaard · Published 2003-02-01 · Updated 2016-10-18 · CVE-2003-0046

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AbsoluteTelnet (affected versions not specified)

Description The issue concerns the AbsoluteTelnet SSH2 client, which fails to clear logon credentials from memory. This includes storing plaintext passwords in memory, making it possible for attackers with access to the memory to steal the SSH credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2003-0046

Affected Products

Absolutetelnet

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2003-0046 · Security Note
• http://celestialsoftware.net/telnet/beta_software.html · Vendor Advisory
• http://idefense.com/advisory/01.28.03.txt · Vendor Advisory
• http://securitytracker.com/id?1006013 · Note
• http://marc.info/?l=bugtraq&m=104386492422014&w=2 · Note
• http://securityfocus.com/bid/6725 · Note
• http://osvdb.org/7686 · Note