Vulnerability in Van_dyke_technologies Entunnel
CVE-2003-0047
SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to…
EPSS: 0.005 (38.2th percentile) — read the EPSS interpretation.
Affected products
- Van_dyke_technologies Entunnel
- Van_dyke_technologies Securecrt — versions 3.4.7, 4.0.2
- Van_dyke_technologies Securefx — versions 2.0.4, 2.1.2
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)