CVE-2021-47765 — AbsoluteTelnet 11.24 - 'Username' Denial of Service (PoC)

CVE-2021-47765

AbsoluteTelnet 11.24 - 'Username' Denial of Service (PoC) PUBLISHED

Description (CNA)

AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating username and error report fields. Attackers can trigger the crash by inserting 1000 characters into the username or email address fields, causing the application to become unresponsive.

Affected (CNA)

Vendor / product	Versions
Celestialsoftware / AbsoluteTelnet	affected 11.24

CWE

CWE-787

References

https://www.exploit-db.com/exploits/50510
https://www.celestialsoftware.net/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.