AbsoluteTelnet 11.12 - "license name" Denial of Service

AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name. Attackers can generate a 2500-character payload and paste it into the license name field to trigger an application crash.

Problem type

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Celestial Software

AbsoluteTelnet

11.12 - AFFECTED

References

ExploitDB-48006

https://www.exploit-db.com/exploits/48006

exploit

Vendor Homepage

https://www.celestialsoftware.net/

product

VulnCheck Advisory: AbsoluteTelnet 11.12 - "license name" Denial of Service

https://www.vulncheck.com/advisories/absolutetelnet-license-name-denial-of-service

third-party-advisory

GitHub Security Advisories

GHSA-7g58-8gc4-vxgv

AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to...

https://github.com/advisories/GHSA-7g58-8gc4-vxgv

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2020-37165

celestialsoftware.net

https://www.celestialsoftware.net

exploit-db.com

https://www.exploit-db.com/exploits/48006

vulncheck.com

https://www.vulncheck.com/advisories/absolutetelnet-license-name-denial-of-service

github.com

https://github.com/advisories/GHSA-7g58-8gc4-vxgv

JSON source

https://cveawg.mitre.org/api/cve/CVE-2020-37165

Click to expand

{
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "cveMetadata": {
    "cveId": "CVE-2020-37165",
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "dateUpdated": "2026-02-06T23:14:12.517Z",
    "dateReserved": "2026-02-06T12:29:40.137Z",
    "datePublished": "2026-02-06T23:14:12.517Z",
    "state": "PUBLISHED"
  },
  "containers": {
    "cna": {
      "providerMetadata": {
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck",
        "dateUpdated": "2026-02-06T23:14:12.517Z"
      },
      "datePublic": "2020-02-05T00:00:00.000Z",
      "title": "AbsoluteTelnet 11.12 - \"license name\" Denial of Service",
      "descriptions": [
        {
          "lang": "en",
          "value": "AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name. Attackers can generate a 2500-character payload and paste it into the license name field to trigger an application crash."
        }
      ],
      "affected": [
        {
          "vendor": "Celestial Software",
          "product": "AbsoluteTelnet",
          "versions": [
            {
              "version": "11.12",
              "status": "affected"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "lang": "en",
              "description": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')",
              "cweId": "CWE-120",
              "type": "CWE"
            }
          ]
        }
      ],
      "references": [
        {
          "url": "https://www.exploit-db.com/exploits/48006",
          "name": "ExploitDB-48006",
          "tags": [
            "exploit"
          ]
        },
        {
          "url": "https://www.celestialsoftware.net/",
          "name": "Vendor Homepage",
          "tags": [
            "product"
          ]
        },
        {
          "url": "https://www.vulncheck.com/advisories/absolutetelnet-license-name-denial-of-service",
          "name": "VulnCheck Advisory: AbsoluteTelnet 11.12 - \"license name\" Denial of Service",
          "tags": [
            "third-party-advisory"
          ]
        }
      ],
      "metrics": [
        {
          "format": "CVSS"
        },
        {
          "format": "CVSS",
          "cvssV3_1": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM"
          }
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "chuyreds",
          "type": "finder"
        }
      ]
    }
  }
}