Description
Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password.
References
- 20011230 blackshell1: Multiple Prolems with Vandykes SecureCRT mailing-list
- securecrt-ssh1-protocol-bo(10111) vdb-entry
- VU#216227 third-party-advisory