cpe:2.3:a:van_dyke_technologies:securecrt:4.0.2:*:*:*:*:*:*:*
SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share.
Max CVSS
7.5
EPSS Score
22.59%
Published
2004-12-31
Updated
2017-07-11
SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.
Max CVSS
4.6
EPSS Score
0.06%
Published
2003-02-19
Updated
2016-10-18
2 vulnerabilities found
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!