CVE-2003-0046

Published: Feb 19, 2003Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

AbsoluteTelnet SSH2 client does not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.

Affected (1)

Products: Celestial Software: Absolutetelnet

Celestial Software

1 product

Absolutetelnet

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Celestial Software Absolutetelnet	Version 2.11

References (12)

http://marc.info/?l=bugtraq&m=104386492422014&w=2

Source: cve@mitre.org

http://www.celestialsoftware.net/telnet/beta_software.html

Source: cve@mitre.org

Vendor Advisory

http://www.idefense.com/advisory/01.28.03.txt

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/7686

Source: cve@mitre.org

http://www.securityfocus.com/bid/6725

Source: cve@mitre.org

http://www.securitytracker.com/id?1006013

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104386492422014&w=2