CyberSec.Space Logo
Back to CVE Browser

CVE-2002-1059

HIGH
7.5
CVSS Severity Score
EPSS Score0.1060%
EPSS Percentile39.84th
PublishedOct 4, 2002
Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string.

Affected Platforms (CPE)

📦
Van Dyke Technologies

Securecrt

= 2.4
📦
Van Dyke Technologies

Securecrt

= 3.0
📦
Van Dyke Technologies

Securecrt

= 3.1
📦
Van Dyke Technologies

Securecrt

= 3.1.1
📦
Van Dyke Technologies

Securecrt

= 3.1.2
📦
Van Dyke Technologies

Securecrt

= 3.2
📦
Van Dyke Technologies

Securecrt

= 3.2.1
📦
Van Dyke Technologies

Securecrt

= 3.3
📦
Van Dyke Technologies

Securecrt

= 3.3.1
📦
Van Dyke Technologies

Securecrt

= 3.3.2
📦
Van Dyke Technologies

Securecrt

= 3.3.3
📦
Van Dyke Technologies

Securecrt

= 3.4
📦
Van Dyke Technologies

Securecrt

= 3.4.1
📦
Van Dyke Technologies

Securecrt

= 3.4.2
📦
Van Dyke Technologies

Securecrt

= 3.4.3
📦
Van Dyke Technologies

Securecrt

= 3.4.4
📦
Van Dyke Technologies

Securecrt

= 3.4.5
📦
Van Dyke Technologies

Securecrt

= 4.0_beta_1
📦
Van Dyke Technologies

Securecrt

= 4.0_beta_2

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=102744150718462&w=2
🔗 http://marc.info/?l=bugtraq&m=102746007908689&w=2
🔗 http://www.iss.net/security_center/static/9650.php
🔗 http://www.osvdb.org/4991
🔗 http://www.securityfocus.com/bid/5287
🔗 http://www.vandyke.com/products/securecrt/security07-25-02.html
🔗 http://marc.info/?l=bugtraq&m=102744150718462&w=2
🔗 http://marc.info/?l=bugtraq&m=102746007908689&w=2

Related Vulnerabilities

CVE-2006-103810.0

Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknown impact wh...

CVE-2020-126519.8

SecureCRT before 8.7.2 allows remote attackers to execute arbitrary code via an Integer Overflow and a Buffer Overflow because a b...

CVE-2001-14667.5

Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary cod...

CVE-2004-15417.5

SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that us...