Lucene search
HistoryFeb 19, 2003 - 5:00 a.m.
CVE-2003-0047
cve-2003-0047
ssh
vandyke
securecrt
securefx
entunnel
vulnerability
memory
theft
credentials
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
25.1%
SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.
Affected configurations
Node
van_dyke_technologiesentunnelRange≤1.0.2
ORvan_dyke_technologiessecurecrtMatch3.4.7
ORvan_dyke_technologiessecurecrtMatch4.0.2
ORvan_dyke_technologiessecurefxMatch2.0.4
ORvan_dyke_technologiessecurefxMatch2.1.2
Related
nvd
nvd
CVE-2003-0047
2003-02-19 05:00:00
cvelist
cvelist
CVE-2003-0047
2003-02-01 05:00:00
securityvulns
securityvulns
iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords
2003-01-30 00:00:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
25.1%
Related for CVE-2003-0047