CVE-2020-37166
MEDIUMAbsoluteTelnet 11.12 - Denial of Service via SSH2 Username Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-37166. PoCs published by chuyreds.
AI-analyzed exploit summary This PoC exploits a denial of service vulnerability in AbsoluteTelnet 11.12 by overflowing the 'SSH2/username' field with a large buffer of 'A' characters, causing the application to crash. The exploit requires manual steps to trigger the crash by pasting the malicious input into the username field.
Description
AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to crash the application. Attackers can overwrite the username field with a 1000-byte buffer, causing the application to become unresponsive and terminate.
Exploits (1)
This PoC exploits a denial of service vulnerability in AbsoluteTelnet 11.12 by overflowing the 'SSH2/username' field with a large buffer of 'A' characters, causing the application to crash. The exploit requires manual steps to trigger the crash by pasting the malicious input into the username field.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H