Lucene search

K
cveMitreCVE-2003-0047
HistoryFeb 19, 2003 - 5:00 a.m.

CVE-2003-0047

2003-02-1905:00:00
mitre
web.nvd.nist.gov
30
cve-2003-0047
ssh
vandyke
securecrt
securefx
entunnel
vulnerability
memory
theft
credentials

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

25.1%

SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.

Affected configurations

Nvd
Node
van_dyke_technologiesentunnelRange1.0.2
OR
van_dyke_technologiessecurecrtMatch3.4.7
OR
van_dyke_technologiessecurecrtMatch4.0.2
OR
van_dyke_technologiessecurefxMatch2.0.4
OR
van_dyke_technologiessecurefxMatch2.1.2
VendorProductVersionCPE
van_dyke_technologiesentunnel*cpe:2.3:a:van_dyke_technologies:entunnel:*:*:*:*:*:*:*:*
van_dyke_technologiessecurecrt3.4.7cpe:2.3:a:van_dyke_technologies:securecrt:3.4.7:*:*:*:*:*:*:*
van_dyke_technologiessecurecrt4.0.2cpe:2.3:a:van_dyke_technologies:securecrt:4.0.2:*:*:*:*:*:*:*
van_dyke_technologiessecurefx2.0.4cpe:2.3:a:van_dyke_technologies:securefx:2.0.4:*:*:*:*:*:*:*
van_dyke_technologiessecurefx2.1.2cpe:2.3:a:van_dyke_technologies:securefx:2.1.2:*:*:*:*:*:*:*

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

25.1%

Related for CVE-2003-0047