Signature Detail

TELNET: Absolute Telnet Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Absolute Telnet client 2.0.0. Attackers can use a malicious Telnet server to overflow the buffer and execute arbitrary commands with permissions of the user that initiated the connection.

Extended Description

A buffer overflow vulnerability was reported for AbsoluteTelnet. The vulnerability exists due to insufficient bounds checking performed when setting the title bar of the client. An attacker can exploit this vulnerability by enticing a victim user to view a website with malicious HTML tags. This will cause the buffer overflow condition. Code execution may be possible.

Affected Products

• Celestial_software absolutetelnet 2.0.0 0
• Celestial_software absolutetelnet 2.11.0

References

• BugTraq: 6785
• CVE: CVE-2003-1090
• URL: http://www.remoteassessment.com/darchive/191005368.html
• URL: http://www.securiteam.com/windowsntfocus/5MP0C0095M.html
• URL: https://services.netscreen.com/restricted/sigupdates/nsm-updates/HTML/TELNET:OVERFLOW:ABSOLUTE-UK2-OF.html