VanDyke.SecureCRT.SSH1.Identifier.Buffer.Overflow

Description

It indicates a possible exploit of "buffer overflow vulnerability" in Van Dyke TechnologiesSecureCRT.

SecureCRT is a terminal emulator software and supports SSH protocol for securely accessing devices and HOST computers. A buffer overflow vulnerability is reported in it that may allow an attacker to execute arbitrary code on the vulnerable SecurCRT client machine. This is due to Secure CRT client application failure to boundary check the initial SSH1 Server response. This may be exploited by an attacker by sending long string via the server version and identifier data to cause buffer overflow for executing arbitrary code on the vulnerable system.

Affected Products

Van Dyke TechnologiesSecureCRT 2.x, 3.x, 4.0 beta 2 and earlier versions.

Impact

Compromise of the affected system.

Recommended Actions

Upgrade according to following vendor recommendation http://www.vandyke.com/products/securecrt/security07-25-02.html

References