CyberSec.Space Logo
Back to CVE Browser

CVE-2020-37166

MEDIUM
6.2
CVSS Severity Score
EPSS Score0.0750%
EPSS Percentile27.19th
PublishedFeb 7, 2026
Last ModifiedFeb 19, 2026

Vulnerability Description

AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to crash the application. Attackers can overwrite the username field with a 1000-byte buffer, causing the application to become unresponsive and terminate.

Affected Platforms (CPE)

📦
Celestialsoftware

Absolutetelnet

= 11.12

References & Advisories

🔗 https://www.celestialsoftware.net/
🔗 https://www.exploit-db.com/exploits/48010
🔗 https://www.vulncheck.com/advisories/absolutetelnet-sshusername-denial-of-service

Related Vulnerabilities

CVE-2003-109010.0

Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.

CVE-2020-371646.2

AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying ...

CVE-2020-371656.2

AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying ...

CVE-2021-477645.5

AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulati...