Search criteria

15 vulnerabilities found for securecrt by van_dyke_technologies

FKIE_CVE-2006-1038

Vulnerability from fkie_nvd - Published: 2006-03-07 11:02 - Updated: 2025-04-03 01:03
Severity ?
Summary
Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknown impact when a Unicode string is converted to a "narrow" string.
References
cve@mitre.orghttp://secunia.com/advisories/19040Patch, Vendor Advisory
cve@mitre.orghttp://www.securityfocus.com/bid/16935
cve@mitre.orghttp://www.vandyke.com/products/securecrt/history.txt
cve@mitre.orghttp://www.vandyke.com/products/securefx/history.txt
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/0806
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/25092
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/19040Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/16935
af854a3a-2127-422b-91ae-364da2661108http://www.vandyke.com/products/securecrt/history.txt
af854a3a-2127-422b-91ae-364da2661108http://www.vandyke.com/products/securefx/history.txt
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/0806
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/25092
Impacted products
Vendor Product Version
van_dyke_technologies securecrt 5.0
van_dyke_technologies securecrt 5.0.1
van_dyke_technologies securecrt 5.0.2
van_dyke_technologies securecrt 5.0.3
van_dyke_technologies securecrt 5.0.4
van_dyke_technologies securecrt 5.0_beta_1
van_dyke_technologies securecrt 5.0_beta_2
van_dyke_technologies securecrt 5.0_beta_3
van_dyke_technologies securecrt 5.0_beta_4
van_dyke_technologies securecrt 5.0_beta_5
van_dyke_technologies securecrt 5.0_beta_6
van_dyke_technologies securefx 3.0
van_dyke_technologies securefx 3.0.1
van_dyke_technologies securefx 3.0.2
van_dyke_technologies securefx 3.0.3
van_dyke_technologies securefx 3.0.4
van_dyke_technologies securefx 3.0_beta_1
van_dyke_technologies securefx 3.0_beta_2
van_dyke_technologies securefx 3.0_beta_3
van_dyke_technologies securefx 3.0_beta_4
van_dyke_technologies securefx 3.0_beta_5
van_dyke_technologies securefx 3.0_beta_6
van_dyke_technologies securefx 3.0_beta_7
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "98E432F5-6F55-43F9-9037-E0BADF323F55",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:5.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "346F16D1-3D7E-4BC2-872B-1EAB7D9CBCB5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:5.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "9A0D3998-BFB5-4A8D-A3F6-F805004192BC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:5.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "B9857B8C-8B1F-4941-A282-B27251D719B3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:5.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AE6EF5B-4749-4E57-A45D-0751ED8F2FFE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:5.0_beta_1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4A07E709-944B-445F-8230-4ADB7561C754",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:5.0_beta_2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7EF68CC-0A31-498C-8DE0-7287DA9BFDB6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:5.0_beta_3:*:*:*:*:*:*:*",
              "matchCriteriaId": "74B0537A-8431-4DC0-80E3-9D5E29D98769",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:5.0_beta_4:*:*:*:*:*:*:*",
              "matchCriteriaId": "DCF6F69D-DA33-4F18-92AF-D91DED75D0EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:5.0_beta_5:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3F33932-0BA1-424D-85C7-1C0AD8895D4B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:5.0_beta_6:*:*:*:*:*:*:*",
              "matchCriteriaId": "C7611803-A034-4F77-A4D7-276DBBEC8137",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securefx:3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C6C14BB6-6CA5-4A03-B1D4-94C976BC24EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securefx:3.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "499A9CC5-01F1-44C2-9FAC-AEE56587F36C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securefx:3.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "53511CA0-E4DB-4803-9ED0-B2A6983823D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securefx:3.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "8D3801A6-6F0D-46D7-A4DE-2B7557757795",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securefx:3.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "37166F30-B555-41EA-9507-266FF5435F1F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securefx:3.0_beta_1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F2DEF06C-AFA7-4D19-A143-CEFABCB64E44",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securefx:3.0_beta_2:*:*:*:*:*:*:*",
              "matchCriteriaId": "5DDB6A60-2361-4111-9A5D-737D2288CD37",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securefx:3.0_beta_3:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1F14C8C-90C7-48B6-8BE7-ABECE900FD71",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securefx:3.0_beta_4:*:*:*:*:*:*:*",
              "matchCriteriaId": "13D5A5E1-B925-4A4A-A153-570153D8C4E9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securefx:3.0_beta_5:*:*:*:*:*:*:*",
              "matchCriteriaId": "116023C4-D356-4A9C-80A9-2FBFE9507A53",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securefx:3.0_beta_6:*:*:*:*:*:*:*",
              "matchCriteriaId": "EDF8DCD1-DB94-4605-98C5-FD579731AAA5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securefx:3.0_beta_7:*:*:*:*:*:*:*",
              "matchCriteriaId": "977AF0A7-F592-4118-8904-7746989F91C8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknown impact when a Unicode string is converted to a \"narrow\" string."
    }
  ],
  "id": "CVE-2006-1038",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-03-07T11:02:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/19040"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/16935"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vandyke.com/products/securecrt/history.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vandyke.com/products/securefx/history.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/0806"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25092"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/19040"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/16935"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vandyke.com/products/securecrt/history.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vandyke.com/products/securefx/history.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/0806"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25092"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2004-1541

Vulnerability from fkie_nvd - Published: 2004-12-31 05:00 - Updated: 2025-04-03 01:03
Severity ?
Summary
SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share.
References
cve@mitre.orghttp://marc.info/?l=bugtraq&m=110129164332226&w=2
cve@mitre.orghttp://secunia.com/advisories/13275/Patch, Vendor Advisory
cve@mitre.orghttp://www.securityfocus.com/bid/11731Patch
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/18201
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=110129164332226&w=2
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/13275/Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/11731Patch
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/18201
Impacted products
Vendor Product Version
van_dyke_technologies securecrt 4.0.1
van_dyke_technologies securecrt 4.0.2
van_dyke_technologies securecrt 4.0.3
van_dyke_technologies securecrt 4.0.4
van_dyke_technologies securecrt 4.0.5
van_dyke_technologies securecrt 4.1
van_dyke_technologies securecrt 4.1.1
van_dyke_technologies securecrt 4.1.2
van_dyke_technologies securecrt 4.1.3
van_dyke_technologies securecrt 4.1.4
van_dyke_technologies securecrt 4.1.5
van_dyke_technologies securecrt 4.1.6
van_dyke_technologies securecrt 4.1.7
van_dyke_technologies securecrt 4.1.8
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:4.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "92422FCC-E670-47ED-B93B-309BBFA1D20F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:4.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC7CC992-1650-40C4-9465-A4B3DB6689C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:4.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "FFEE5BE3-63DD-499E-A8D0-5808F5A8F3F0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:4.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "BCC51644-6117-41D4-AB0E-5A73CD9ED4C7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:4.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "3E1C242B-4D21-423B-B80C-2DBA97832840",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "3DFD9742-8AD0-4616-9503-5E4F2EFE4F1B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:4.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1F743DE-182F-42AF-A78A-D9AAA3127324",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:4.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "B420CB7E-061F-41B5-A643-63BF2B8F6D60",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:4.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "61A9957A-C408-4926-A9B1-4CA6E11B92EE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:4.1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "09078DE6-B12C-4255-9B59-C532F2CA3FE8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:4.1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "BE0DCE51-2BF7-4816-A75F-349A7F69FB41",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:4.1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "EDC9C3B3-664D-47B0-83DD-B7F5E6E040F2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:4.1.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B56D339-4DB1-4090-990A-8ACADF6CFC12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:4.1.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "8E5D9B72-5221-4396-90B1-FE8B9C496412",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share."
    }
  ],
  "id": "CVE-2004-1541",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2004-12-31T05:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=110129164332226\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/13275/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/11731"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18201"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=110129164332226\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/13275/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/11731"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18201"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2003-0047

Vulnerability from fkie_nvd - Published: 2003-02-19 05:00 - Updated: 2025-04-03 01:03
Severity ?
Summary
SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.
References
cve@mitre.orghttp://marc.info/?l=bugtraq&m=104386492422014&w=2
cve@mitre.orghttp://www.idefense.com/advisory/01.28.03.txtPatch, Vendor Advisory
cve@mitre.orghttp://www.securityfocus.com/bid/6726
cve@mitre.orghttp://www.securityfocus.com/bid/6727
cve@mitre.orghttp://www.securityfocus.com/bid/6728
cve@mitre.orghttp://www.securitytracker.com/id?1006010
cve@mitre.orghttp://www.securitytracker.com/id?1006011
cve@mitre.orghttp://www.securitytracker.com/id?1006012
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=104386492422014&w=2
af854a3a-2127-422b-91ae-364da2661108http://www.idefense.com/advisory/01.28.03.txtPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/6726
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/6727
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/6728
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1006010
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1006011
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1006012
Impacted products
Vendor Product Version
van_dyke_technologies entunnel *
van_dyke_technologies securecrt 3.4.7
van_dyke_technologies securecrt 4.0.2
van_dyke_technologies securefx 2.0.4
van_dyke_technologies securefx 2.1.2
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:entunnel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "503444E8-431B-48A9-BF7E-A8DD3FF47E0A",
              "versionEndIncluding": "1.0.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:3.4.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "9F4B4CAB-77BB-49F4-B72D-C077DB8803B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:4.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC7CC992-1650-40C4-9465-A4B3DB6689C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securefx:2.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD1D6B50-6F7E-4750-BC24-22F823E34454",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securefx:2.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "0858A846-9044-4360-A214-A4F7785532CF",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials."
    },
    {
      "lang": "es",
      "value": "Los clientes SSH2 de VanDyke SecureCRT 4.0.2 y 3.4.5, SecureFX 2.1.2 y 2.0.4, y Entunnel 1.02 y anteriores, no borran los credenciales de inicio de sesi\u00f3n de memoria, incluyendo contrase\u00f1as en texto claro, lo que podr\u00eda permitir a atacantes con acceso a memoria robar los credenciales SSH."
    }
  ],
  "id": "CVE-2003-0047",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.6,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2003-02-19T05:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=104386492422014\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.idefense.com/advisory/01.28.03.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/6726"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/6727"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/6728"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1006010"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1006011"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1006012"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=104386492422014\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.idefense.com/advisory/01.28.03.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/6726"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/6727"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/6728"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1006010"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1006011"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1006012"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2002-1059

Vulnerability from fkie_nvd - Published: 2002-10-04 04:00 - Updated: 2025-04-03 01:03
Severity ?
Summary
Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string.
References
cve@mitre.orghttp://marc.info/?l=bugtraq&m=102744150718462&w=2
cve@mitre.orghttp://marc.info/?l=bugtraq&m=102746007908689&w=2
cve@mitre.orghttp://www.iss.net/security_center/static/9650.phpPatch, Vendor Advisory
cve@mitre.orghttp://www.osvdb.org/4991
cve@mitre.orghttp://www.securityfocus.com/bid/5287Exploit, Patch, Vendor Advisory
cve@mitre.orghttp://www.vandyke.com/products/securecrt/security07-25-02.html
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=102744150718462&w=2
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=102746007908689&w=2
af854a3a-2127-422b-91ae-364da2661108http://www.iss.net/security_center/static/9650.phpPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/4991
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/5287Exploit, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.vandyke.com/products/securecrt/security07-25-02.html
Impacted products
Vendor Product Version
van_dyke_technologies securecrt 2.4
van_dyke_technologies securecrt 3.0
van_dyke_technologies securecrt 3.1
van_dyke_technologies securecrt 3.1.1
van_dyke_technologies securecrt 3.1.2
van_dyke_technologies securecrt 3.2
van_dyke_technologies securecrt 3.2.1
van_dyke_technologies securecrt 3.3
van_dyke_technologies securecrt 3.3.1
van_dyke_technologies securecrt 3.3.2
van_dyke_technologies securecrt 3.3.3
van_dyke_technologies securecrt 3.4
van_dyke_technologies securecrt 3.4.1
van_dyke_technologies securecrt 3.4.2
van_dyke_technologies securecrt 3.4.3
van_dyke_technologies securecrt 3.4.4
van_dyke_technologies securecrt 3.4.5
van_dyke_technologies securecrt 4.0_beta_1
van_dyke_technologies securecrt 4.0_beta_2
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "71351D2F-1FE0-4471-A502-10701D7C7380",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "554D08E5-8B1A-4C29-A871-88D22960AB01",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "407045A6-C071-4F35-B6AC-AC56E55BCEAF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:3.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8FCDDA3-09AF-43E8-8528-C7DECA6FBC12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:3.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "5887BBF3-1EB2-4948-B9E6-322929F269F2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "AA6160E6-742B-459A-9DF6-4B934F893672",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:3.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC90C984-D3B5-4710-A393-BB149ADD7A09",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:3.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "A05EE976-B386-446B-92A5-9E14BC62779D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:3.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2A4AC2D-590F-43E7-8186-874AF9818D2A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:3.3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "B06270D7-5E5D-4AB5-BC0E-143DB956725D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:3.3.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "603D2194-99E1-4738-9A66-CE28DB44EB81",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:3.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "8C09AF3F-EC54-42FA-9668-93CE4224CBCC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:3.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B9C144FC-D9CE-4817-9276-C1B47957FD06",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:3.4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B45E68A-E939-4853-B467-9F5474E5DF6F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:3.4.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "B117F4F8-0EED-475F-A588-9D228F67AFD8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:3.4.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "693E4138-17B5-44F9-AC7A-3DAC791E981E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:3.4.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "23D87C93-669D-4415-969A-28070A32C7E0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:4.0_beta_1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0205ED89-3610-4174-9BA2-1E2BF5786844",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:4.0_beta_2:*:*:*:*:*:*:*",
              "matchCriteriaId": "0F72FA96-8356-4C0E-8DAE-F76304C50065",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string."
    }
  ],
  "id": "CVE-2002-1059",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2002-10-04T04:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=102744150718462\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=102746007908689\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.iss.net/security_center/static/9650.php"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/4991"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.securityfocus.com/bid/5287"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vandyke.com/products/securecrt/security07-25-02.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=102744150718462\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=102746007908689\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.iss.net/security_center/static/9650.php"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/4991"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.securityfocus.com/bid/5287"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vandyke.com/products/securecrt/security07-25-02.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2001-1466

Vulnerability from fkie_nvd - Published: 2001-12-30 05:00 - Updated: 2025-04-03 01:03
Severity ?
Summary
Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password.
References
cve@mitre.orghttp://archives.neohapsis.com/archives/vuln-dev/2001-q4/0967.html
cve@mitre.orghttp://www.kb.cert.org/vuls/id/216227US Government Resource
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/10111
af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0967.html
af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/216227US Government Resource
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/10111
Impacted products
Vendor Product Version
van_dyke_technologies securecrt *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:van_dyke_technologies:securecrt:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "00C43052-CBB3-440C-8872-88D6380F8BF8",
              "versionEndIncluding": "3.4.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password."
    }
  ],
  "id": "CVE-2001-1466",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2001-12-30T05:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0967.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/216227"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10111"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0967.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/216227"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10111"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2006-1038 (GCVE-0-2006-1038)

Vulnerability from cvelistv5 – Published: 2006-03-07 11:00 – Updated: 2024-08-07 16:56
VLAI?
Summary
Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknown impact when a Unicode string is converted to a "narrow" string.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:56:14.988Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "securecrt-securefx-string-bo(25092)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25092"
          },
          {
            "name": "16935",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16935"
          },
          {
            "name": "19040",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19040"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vandyke.com/products/securecrt/history.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vandyke.com/products/securefx/history.txt"
          },
          {
            "name": "ADV-2006-0806",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/0806"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-03-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknown impact when a Unicode string is converted to a \"narrow\" string."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "securecrt-securefx-string-bo(25092)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25092"
        },
        {
          "name": "16935",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16935"
        },
        {
          "name": "19040",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19040"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vandyke.com/products/securecrt/history.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vandyke.com/products/securefx/history.txt"
        },
        {
          "name": "ADV-2006-0806",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/0806"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-1038",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknown impact when a Unicode string is converted to a \"narrow\" string."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "securecrt-securefx-string-bo(25092)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25092"
            },
            {
              "name": "16935",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16935"
            },
            {
              "name": "19040",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19040"
            },
            {
              "name": "http://www.vandyke.com/products/securecrt/history.txt",
              "refsource": "CONFIRM",
              "url": "http://www.vandyke.com/products/securecrt/history.txt"
            },
            {
              "name": "http://www.vandyke.com/products/securefx/history.txt",
              "refsource": "CONFIRM",
              "url": "http://www.vandyke.com/products/securefx/history.txt"
            },
            {
              "name": "ADV-2006-0806",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/0806"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-1038",
    "datePublished": "2006-03-07T11:00:00",
    "dateReserved": "2006-03-07T00:00:00",
    "dateUpdated": "2024-08-07T16:56:14.988Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2001-1466 (GCVE-0-2001-1466)

Vulnerability from cvelistv5 – Published: 2005-04-21 04:00 – Updated: 2024-08-08 04:58
VLAI?
Summary
Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://archives.neohapsis.com/archives/vuln-dev/2… mailing-listx_refsource_VULN-DEV
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
http://www.kb.cert.org/vuls/id/216227 third-party-advisoryx_refsource_CERT-VN
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T04:58:11.419Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20011230 blackshell1: Multiple Prolems with Vandykes SecureCRT",
            "tags": [
              "mailing-list",
              "x_refsource_VULN-DEV",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0967.html"
          },
          {
            "name": "securecrt-ssh1-protocol-bo(10111)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10111"
          },
          {
            "name": "VU#216227",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/216227"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2001-12-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-10T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20011230 blackshell1: Multiple Prolems with Vandykes SecureCRT",
          "tags": [
            "mailing-list",
            "x_refsource_VULN-DEV"
          ],
          "url": "http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0967.html"
        },
        {
          "name": "securecrt-ssh1-protocol-bo(10111)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10111"
        },
        {
          "name": "VU#216227",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/216227"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2001-1466",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20011230 blackshell1: Multiple Prolems with Vandykes SecureCRT",
              "refsource": "VULN-DEV",
              "url": "http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0967.html"
            },
            {
              "name": "securecrt-ssh1-protocol-bo(10111)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10111"
            },
            {
              "name": "VU#216227",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/216227"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2001-1466",
    "datePublished": "2005-04-21T04:00:00",
    "dateReserved": "2005-04-21T00:00:00",
    "dateUpdated": "2024-08-08T04:58:11.419Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2004-1541 (GCVE-0-2004-1541)

Vulnerability from cvelistv5 – Published: 2005-02-19 05:00 – Updated: 2024-08-08 00:53
VLAI?
Summary
SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://marc.info/?l=bugtraq&m=110129164332226&w=2 mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/13275/ third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/11731 vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T00:53:24.087Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20041123 SecureCRT - Remote Command Execution",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=110129164332226\u0026w=2"
          },
          {
            "name": "13275",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/13275/"
          },
          {
            "name": "11731",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/11731"
          },
          {
            "name": "securecrt-folder-command-execution(18201)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2004-11-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-10T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20041123 SecureCRT - Remote Command Execution",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=110129164332226\u0026w=2"
        },
        {
          "name": "13275",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/13275/"
        },
        {
          "name": "11731",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/11731"
        },
        {
          "name": "securecrt-folder-command-execution(18201)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-1541",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20041123 SecureCRT - Remote Command Execution",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=110129164332226\u0026w=2"
            },
            {
              "name": "13275",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/13275/"
            },
            {
              "name": "11731",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/11731"
            },
            {
              "name": "securecrt-folder-command-execution(18201)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2004-1541",
    "datePublished": "2005-02-19T05:00:00",
    "dateReserved": "2005-02-18T00:00:00",
    "dateUpdated": "2024-08-08T00:53:24.087Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2002-1059 (GCVE-0-2002-1059)

Vulnerability from cvelistv5 – Published: 2003-04-02 05:00 – Updated: 2024-08-08 03:12
VLAI?
Summary
Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:12:17.033Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20020723 Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=102746007908689\u0026w=2"
          },
          {
            "name": "20020723 Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 \u0026 4.0 beta",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=102744150718462\u0026w=2"
          },
          {
            "name": "securecrt-ssh1-identifier-bo(9650)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "http://www.iss.net/security_center/static/9650.php"
          },
          {
            "name": "4991",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/4991"
          },
          {
            "name": "5287",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/5287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vandyke.com/products/securecrt/security07-25-02.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-07-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2002-09-10T09:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20020723 Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=102746007908689\u0026w=2"
        },
        {
          "name": "20020723 Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 \u0026 4.0 beta",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=102744150718462\u0026w=2"
        },
        {
          "name": "securecrt-ssh1-identifier-bo(9650)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "http://www.iss.net/security_center/static/9650.php"
        },
        {
          "name": "4991",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/4991"
        },
        {
          "name": "5287",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/5287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vandyke.com/products/securecrt/security07-25-02.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-1059",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20020723 Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=102746007908689\u0026w=2"
            },
            {
              "name": "20020723 Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 \u0026 4.0 beta",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=102744150718462\u0026w=2"
            },
            {
              "name": "securecrt-ssh1-identifier-bo(9650)",
              "refsource": "XF",
              "url": "http://www.iss.net/security_center/static/9650.php"
            },
            {
              "name": "4991",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/4991"
            },
            {
              "name": "5287",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/5287"
            },
            {
              "name": "http://www.vandyke.com/products/securecrt/security07-25-02.html",
              "refsource": "CONFIRM",
              "url": "http://www.vandyke.com/products/securecrt/security07-25-02.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-1059",
    "datePublished": "2003-04-02T05:00:00",
    "dateReserved": "2002-08-30T00:00:00",
    "dateUpdated": "2024-08-08T03:12:17.033Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2003-0047 (GCVE-0-2003-0047)

Vulnerability from cvelistv5 – Published: 2003-02-01 05:00 – Updated: 2024-08-08 01:43
VLAI?
Summary
SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://marc.info/?l=bugtraq&m=104386492422014&w=2 mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/6727 vdb-entryx_refsource_BID
http://www.securityfocus.com/bid/6728 vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1006011 vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id?1006010 vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id?1006012 vdb-entryx_refsource_SECTRACK
http://www.idefense.com/advisory/01.28.03.txt x_refsource_MISC
http://www.securityfocus.com/bid/6726 vdb-entryx_refsource_BID
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T01:43:35.246Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20030129 iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=104386492422014\u0026w=2"
          },
          {
            "name": "6727",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/6727"
          },
          {
            "name": "6728",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/6728"
          },
          {
            "name": "1006011",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1006011"
          },
          {
            "name": "1006010",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1006010"
          },
          {
            "name": "1006012",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1006012"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.idefense.com/advisory/01.28.03.txt"
          },
          {
            "name": "6726",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/6726"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2003-01-29T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-10-17T13:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20030129 iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=104386492422014\u0026w=2"
        },
        {
          "name": "6727",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/6727"
        },
        {
          "name": "6728",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/6728"
        },
        {
          "name": "1006011",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1006011"
        },
        {
          "name": "1006010",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1006010"
        },
        {
          "name": "1006012",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1006012"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.idefense.com/advisory/01.28.03.txt"
        },
        {
          "name": "6726",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/6726"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2003-0047",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20030129 iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=104386492422014\u0026w=2"
            },
            {
              "name": "6727",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/6727"
            },
            {
              "name": "6728",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/6728"
            },
            {
              "name": "1006011",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1006011"
            },
            {
              "name": "1006010",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1006010"
            },
            {
              "name": "1006012",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1006012"
            },
            {
              "name": "http://www.idefense.com/advisory/01.28.03.txt",
              "refsource": "MISC",
              "url": "http://www.idefense.com/advisory/01.28.03.txt"
            },
            {
              "name": "6726",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/6726"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2003-0047",
    "datePublished": "2003-02-01T05:00:00",
    "dateReserved": "2003-01-28T00:00:00",
    "dateUpdated": "2024-08-08T01:43:35.246Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-1038 (GCVE-0-2006-1038)

Vulnerability from nvd – Published: 2006-03-07 11:00 – Updated: 2024-08-07 16:56
VLAI?
Summary
Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknown impact when a Unicode string is converted to a "narrow" string.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:56:14.988Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "securecrt-securefx-string-bo(25092)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25092"
          },
          {
            "name": "16935",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16935"
          },
          {
            "name": "19040",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19040"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vandyke.com/products/securecrt/history.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vandyke.com/products/securefx/history.txt"
          },
          {
            "name": "ADV-2006-0806",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/0806"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-03-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknown impact when a Unicode string is converted to a \"narrow\" string."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "securecrt-securefx-string-bo(25092)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25092"
        },
        {
          "name": "16935",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16935"
        },
        {
          "name": "19040",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19040"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vandyke.com/products/securecrt/history.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vandyke.com/products/securefx/history.txt"
        },
        {
          "name": "ADV-2006-0806",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/0806"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-1038",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknown impact when a Unicode string is converted to a \"narrow\" string."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "securecrt-securefx-string-bo(25092)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25092"
            },
            {
              "name": "16935",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16935"
            },
            {
              "name": "19040",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19040"
            },
            {
              "name": "http://www.vandyke.com/products/securecrt/history.txt",
              "refsource": "CONFIRM",
              "url": "http://www.vandyke.com/products/securecrt/history.txt"
            },
            {
              "name": "http://www.vandyke.com/products/securefx/history.txt",
              "refsource": "CONFIRM",
              "url": "http://www.vandyke.com/products/securefx/history.txt"
            },
            {
              "name": "ADV-2006-0806",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/0806"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-1038",
    "datePublished": "2006-03-07T11:00:00",
    "dateReserved": "2006-03-07T00:00:00",
    "dateUpdated": "2024-08-07T16:56:14.988Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2001-1466 (GCVE-0-2001-1466)

Vulnerability from nvd – Published: 2005-04-21 04:00 – Updated: 2024-08-08 04:58
VLAI?
Summary
Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://archives.neohapsis.com/archives/vuln-dev/2… mailing-listx_refsource_VULN-DEV
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
http://www.kb.cert.org/vuls/id/216227 third-party-advisoryx_refsource_CERT-VN
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T04:58:11.419Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20011230 blackshell1: Multiple Prolems with Vandykes SecureCRT",
            "tags": [
              "mailing-list",
              "x_refsource_VULN-DEV",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0967.html"
          },
          {
            "name": "securecrt-ssh1-protocol-bo(10111)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10111"
          },
          {
            "name": "VU#216227",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/216227"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2001-12-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-10T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20011230 blackshell1: Multiple Prolems with Vandykes SecureCRT",
          "tags": [
            "mailing-list",
            "x_refsource_VULN-DEV"
          ],
          "url": "http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0967.html"
        },
        {
          "name": "securecrt-ssh1-protocol-bo(10111)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10111"
        },
        {
          "name": "VU#216227",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/216227"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2001-1466",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20011230 blackshell1: Multiple Prolems with Vandykes SecureCRT",
              "refsource": "VULN-DEV",
              "url": "http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0967.html"
            },
            {
              "name": "securecrt-ssh1-protocol-bo(10111)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10111"
            },
            {
              "name": "VU#216227",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/216227"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2001-1466",
    "datePublished": "2005-04-21T04:00:00",
    "dateReserved": "2005-04-21T00:00:00",
    "dateUpdated": "2024-08-08T04:58:11.419Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2004-1541 (GCVE-0-2004-1541)

Vulnerability from nvd – Published: 2005-02-19 05:00 – Updated: 2024-08-08 00:53
VLAI?
Summary
SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://marc.info/?l=bugtraq&m=110129164332226&w=2 mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/13275/ third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/11731 vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T00:53:24.087Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20041123 SecureCRT - Remote Command Execution",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=110129164332226\u0026w=2"
          },
          {
            "name": "13275",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/13275/"
          },
          {
            "name": "11731",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/11731"
          },
          {
            "name": "securecrt-folder-command-execution(18201)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2004-11-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-10T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20041123 SecureCRT - Remote Command Execution",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=110129164332226\u0026w=2"
        },
        {
          "name": "13275",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/13275/"
        },
        {
          "name": "11731",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/11731"
        },
        {
          "name": "securecrt-folder-command-execution(18201)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-1541",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20041123 SecureCRT - Remote Command Execution",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=110129164332226\u0026w=2"
            },
            {
              "name": "13275",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/13275/"
            },
            {
              "name": "11731",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/11731"
            },
            {
              "name": "securecrt-folder-command-execution(18201)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2004-1541",
    "datePublished": "2005-02-19T05:00:00",
    "dateReserved": "2005-02-18T00:00:00",
    "dateUpdated": "2024-08-08T00:53:24.087Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2002-1059 (GCVE-0-2002-1059)

Vulnerability from nvd – Published: 2003-04-02 05:00 – Updated: 2024-08-08 03:12
VLAI?
Summary
Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:12:17.033Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20020723 Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=102746007908689\u0026w=2"
          },
          {
            "name": "20020723 Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 \u0026 4.0 beta",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=102744150718462\u0026w=2"
          },
          {
            "name": "securecrt-ssh1-identifier-bo(9650)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "http://www.iss.net/security_center/static/9650.php"
          },
          {
            "name": "4991",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/4991"
          },
          {
            "name": "5287",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/5287"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vandyke.com/products/securecrt/security07-25-02.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-07-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2002-09-10T09:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20020723 Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=102746007908689\u0026w=2"
        },
        {
          "name": "20020723 Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 \u0026 4.0 beta",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=102744150718462\u0026w=2"
        },
        {
          "name": "securecrt-ssh1-identifier-bo(9650)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "http://www.iss.net/security_center/static/9650.php"
        },
        {
          "name": "4991",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/4991"
        },
        {
          "name": "5287",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/5287"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vandyke.com/products/securecrt/security07-25-02.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-1059",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20020723 Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=102746007908689\u0026w=2"
            },
            {
              "name": "20020723 Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 \u0026 4.0 beta",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=102744150718462\u0026w=2"
            },
            {
              "name": "securecrt-ssh1-identifier-bo(9650)",
              "refsource": "XF",
              "url": "http://www.iss.net/security_center/static/9650.php"
            },
            {
              "name": "4991",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/4991"
            },
            {
              "name": "5287",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/5287"
            },
            {
              "name": "http://www.vandyke.com/products/securecrt/security07-25-02.html",
              "refsource": "CONFIRM",
              "url": "http://www.vandyke.com/products/securecrt/security07-25-02.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-1059",
    "datePublished": "2003-04-02T05:00:00",
    "dateReserved": "2002-08-30T00:00:00",
    "dateUpdated": "2024-08-08T03:12:17.033Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2003-0047 (GCVE-0-2003-0047)

Vulnerability from nvd – Published: 2003-02-01 05:00 – Updated: 2024-08-08 01:43
VLAI?
Summary
SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://marc.info/?l=bugtraq&m=104386492422014&w=2 mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/6727 vdb-entryx_refsource_BID
http://www.securityfocus.com/bid/6728 vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1006011 vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id?1006010 vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id?1006012 vdb-entryx_refsource_SECTRACK
http://www.idefense.com/advisory/01.28.03.txt x_refsource_MISC
http://www.securityfocus.com/bid/6726 vdb-entryx_refsource_BID
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T01:43:35.246Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20030129 iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=104386492422014\u0026w=2"
          },
          {
            "name": "6727",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/6727"
          },
          {
            "name": "6728",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/6728"
          },
          {
            "name": "1006011",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1006011"
          },
          {
            "name": "1006010",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1006010"
          },
          {
            "name": "1006012",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1006012"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.idefense.com/advisory/01.28.03.txt"
          },
          {
            "name": "6726",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/6726"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2003-01-29T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-10-17T13:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20030129 iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=104386492422014\u0026w=2"
        },
        {
          "name": "6727",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/6727"
        },
        {
          "name": "6728",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/6728"
        },
        {
          "name": "1006011",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1006011"
        },
        {
          "name": "1006010",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1006010"
        },
        {
          "name": "1006012",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1006012"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.idefense.com/advisory/01.28.03.txt"
        },
        {
          "name": "6726",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/6726"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2003-0047",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20030129 iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=104386492422014\u0026w=2"
            },
            {
              "name": "6727",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/6727"
            },
            {
              "name": "6728",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/6728"
            },
            {
              "name": "1006011",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1006011"
            },
            {
              "name": "1006010",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1006010"
            },
            {
              "name": "1006012",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1006012"
            },
            {
              "name": "http://www.idefense.com/advisory/01.28.03.txt",
              "refsource": "MISC",
              "url": "http://www.idefense.com/advisory/01.28.03.txt"
            },
            {
              "name": "6726",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/6726"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2003-0047",
    "datePublished": "2003-02-01T05:00:00",
    "dateReserved": "2003-01-28T00:00:00",
    "dateUpdated": "2024-08-08T01:43:35.246Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}