CyberSec.Space Logo
CVEブラウザに戻る

CVE-2020-37165

MEDIUM
6.2
CVSS Severity Score
EPSS Score0.0980%
EPSS Percentile14.61th
Published2026年2月7日
Last Modified2026年2月19日

Vulnerability Description

AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name. Attackers can generate a 2500-character payload and paste it into the license name field to trigger an application crash.

Affected Platforms (CPE)

📦
Celestialsoftware

Absolutetelnet

<= 11.12

References & Advisories

🔗 https://www.celestialsoftware.net/
🔗 https://www.exploit-db.com/exploits/48006
🔗 https://www.vulncheck.com/advisories/absolutetelnet-license-name-denial-of-service

関連する脆弱性情報

CVE-2003-109010.0

Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.

CVE-2020-371646.2

AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying ...

CVE-2020-371666.2

AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to cr...

CVE-2021-477645.5

AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulati...