CVE-2003-0047 | BDVDB-2026-4855 Detail
Description#
SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://marc.info/?l=bugtraq&m=104386492422014&w=2
- http://www.securityfocus.com/bid/6727
- http://www.securityfocus.com/bid/6728
- http://www.securitytracker.com/id?1006011
- http://www.securitytracker.com/id?1006010
- http://www.securitytracker.com/id?1006012
- http://www.idefense.com/advisory/01.28.03.txt
- http://www.securityfocus.com/bid/6726
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.