VanDyke SecureCRT Arbitrary Configuration Folder Specification (CVE-2004-1541)

SecureCRT is a popular terminal application which provides support for a number of remote access protocols such as SSH1, SSH2 and Telnet. A vulnerability exists in the way VanDyke SecureCRT handles telnet URLs. Through the use of a telnet URL, SecureCRT can be remotely supplied a parameter which...

CVE-2004-1541

CVE-2004-1541 affects VanDyke SecureCRT for Windows (notably 4.0 and 4.1; likely others) where a telnet:// URL using the /F option to specify a configuration file on a Samba share can cause arbitrary command execution. Root cause: insecure handling of telnet URL/remote configuration folder refere...

CVE-2004-1541

SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share...