Back to CVE Browser

CVE-2001-1466

HIGH

7.5

CVSS Severity Score

EPSS Score0.1140%

EPSS Percentile42.73th

PublishedDec 30, 2001

Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password.

Affected Platforms (CPE)

📦

Van Dyke Technologies

Securecrt

<= 3.4.1

References & Advisories

🔗 http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0967.html

🔗 http://www.kb.cert.org/vuls/id/216227

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/10111

🔗 http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0967.html

🔗 http://www.kb.cert.org/vuls/id/216227

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/10111

Related Vulnerabilities

CVE-2006-103810.0

Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknown impact wh...

CVE-2020-126519.8

SecureCRT before 8.7.2 allows remote attackers to execute arbitrary code via an Integer Overflow and a Buffer Overflow because a b...

CVE-2002-10597.5

Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrar...

CVE-2004-15417.5

SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that us...