vulnwire
7.5high

CVE-2002-1059in critical feed3 exploits

Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code vi…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
60.3%
percentile 99%
Public exploits
3
Exploit-DB

Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string.

Exploit prediction (EPSS)

60.30% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • EDB-21635 SecureCRT 2.4/3.x/4.0 - SSH1 Identifier String Buffer Overflow (2) · remote · 2002-07-23
  • EDB-21634 SecureCRT 2.4/3.x/4.0 - SSH1 Identifier String Buffer Overflow (1) · dos · 2002-07-23
  • EDB-16460 SecureCRT 4.0 Beta 2 SSH1 - Remote Buffer Overflow (Metasploit) · remote · 2010-04-30

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • marc.info /?l=bugtraq&m=102746007908689&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • marc.info /?l=bugtraq&m=102744150718462&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • iss.net /security_center/static/9650.php · vdb-entry, x_refsource_XF, x_transferred
  • osvdb.org /4991 · vdb-entry, x_refsource_OSVDB, x_transferred
  • securityfocus.com /bid/5287 · vdb-entry, x_refsource_BID, x_transferred
  • vandyke.com /products/securecrt/security07-25-02.html · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.