Celestial Software AbsoluteTelnet SSH2 Authentication Password Persistence Weakness

Bugtraq ID:	6725
Class:	Design Error
CVE:	CVE-2003-0046
Remote:	No
Local:	Yes
Published:	Jan 29 2003 12:00AM
Updated:	Jul 11 2009 08:06PM
Credit:	Discovery credited to Knud Erik Højgaard <[email protected]>.
Vulnerable:	Celestial Software AbsoluteTelnet 2.11
Not Vulnerable:	Celestial Software AbsoluteTelnet 2.12

Celestial Software AbsoluteTelnet SSH2 Authentication Password Persistence Weakness

It has been reported that AbsoluteTelnet does not properly handle password information. Due to the improper handling of this information, a local user may be able to recover authentication passwords.

Celestial Software AbsoluteTelnet SSH2 Authentication Password Persistence Weakness

No exploit is required for this weakness.

Celestial Software AbsoluteTelnet SSH2 Authentication Password Persistence Weakness

Solution:
The vendor has made a fixed beta version of the software available. version 2.12 is available for download at http://www.celestialsoftware.net/telnet/beta_software.html. The final fixed version will be made available at http://www.celestialsoftware.net/telnet.

Celestial Software AbsoluteTelnet SSH2 Authentication Password Persistence Weakness

References:

• AbsoluteTelnet (Celestial Software)
  
• iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords ("iDEFENSE Labs" )