TELNET: Absolute Telnet Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Absolute Telnet client 2.0.0. Attackers can use a malicious Telnet server to overflow the buffer and execute arbitrary commands with permissions of the user that initiated the connection.

Extended Description

A buffer overflow vulnerability was reported for AbsoluteTelnet. The vulnerability exists due to insufficient bounds checking performed when setting the title bar of the client. An attacker can exploit this vulnerability by enticing a victim user to view a website with malicious HTML tags. This will cause the buffer overflow condition. Code execution may be possible.

Affected Products

Celestial_software absolutetelnet

References

BugTraq: 6785

CVE: CVE-2003-1090

URL: http://www.remoteassessment.com/darchive/191005368.html http://www.securiteam.com/windowsntfocus/5MP0C0095M.html https://services.netscreen.com/restricted/sigupdates/nsm-updates/HTML/TELNET:OVERFLOW:ABSOLUTE-UK2-OF.html

Short Name

TELNET:OVERFLOW:ABSOLUTE-UK2-OF

Severity

Major

Recommended

False

Recommended Action

Drop

TELNET: Absolute Telnet Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?