high7.5Public exploit code
CVE-2002-1059
Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protoc…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SecureCRT 2.4/3.x/4.0 - SSH1 Identifier String Buffer Overflow (2)2002-07-23 · remote · windows · Verified
- SecureCRT 2.4/3.x/4.0 - SSH1 Identifier String Buffer Overflow (1)2002-07-23 · dos · windows · Verified
- SecureCRT 4.0 Beta 2 SSH1 - Remote Buffer Overflow (Metasploit)2010-04-30 · remote · windows · Verified
Impact
Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Van Dyke Technologies | Securecrt | Versions 2.4, 3.0, 3.1, 3.1.1, 3.1.2, 3.2 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=102744150718462&w=2
- http://marc.info/?l=bugtraq&m=102746007908689&w=2
- http://www.iss.net/security_center/static/9650.php
- http://www.osvdb.org/4991
- http://www.securityfocus.com/bid/5287
- http://www.vandyke.com/products/securecrt/security07-25-02.html
- http://marc.info/?l=bugtraq&m=102744150718462&w=2
- http://marc.info/?l=bugtraq&m=102746007908689&w=2
- http://www.iss.net/security_center/static/9650.php
- http://www.osvdb.org/4991
- http://www.securityfocus.com/bid/5287
- http://www.vandyke.com/products/securecrt/security07-25-02.html