Vulnerability Note VU#666073

AbsoluteTelnet vulnerable to buffer overflow via overly long window title

Overview

A remotely exploitable buffer overflow vulnerability exists in AbsoluteTelnet. This vulnerability may allow a malicious server operator to execute arbitrary code on a vulnerable client.

I. Description

AbsoluteTelnet is a terminal client. A remotely exploitable buffer overflow vulnerability exists in the code that sets the terminal titlebar. This vulnerability may allow a malicious server operator to execute arbitrary code. An exploit for this vulnerability is publicly available.

II. Impact

A malicious server operator may be able to execute arbitrary code on a host running AbsoluteTelnet.

III. Solution

Upgrade to AbsoluteTelnet version 2.12 RC10. For information on how to obtain 2.12 RC10, please see http://www.celestialsoftware.net/telnet/beta_software.html.

Systems Affected

Vendor	Status	Date Updated
Celestial Software	Vulnerable	7-Feb-2003

References

http://www.celestialsoftware.net/telnet/index.html
http://kokanins.homepage.dk/absolutetelnet.txt

Credit

This vulnerability was discovered by Knud Erik H�jgaard.

This document was written by Ian A Finlay.

Other Information

Date Public	02/06/2003
Date First Published	02/07/2003 10:23:17 AM
Date Last Updated	02/07/2003
CERT Advisory
CVE Name
Metric	22.20
Document Revision	9

If you have feedback, comments, or additional information about this vulnerability, please send us email.