CVE-2003-0046

CVE-2003-0046 describes a vulnerability in the AbsoluteTelnet SSH2 client where logon credentials, including plaintext passwords, are not properly cleared from memory. This flaw could allow an attacker with local memory access to steal SSH credentials. The vulnerability has a CVSS score of 4.6 (medium severity) with a local attack vector, low attack complexity, and potential for partial impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, or entries in ExploitDB. Despite its age, the CVE has garnered some community discussion, with 10 mentions, primarily on GitHub.