CVEvulnerability

CVE-2003-0047

4.6 MEDIUM Published 2003-02-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-02-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.

Affected configurations

• van dyke technologies entunnel (<= 1.0.2) • van dyke technologies securecrt 3.4.7 • van dyke technologies securecrt 4.0.2 • van dyke technologies securefx 2.0.4 • van dyke technologies securefx 2.1.2

References