Description
SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share.
References
- 20041123 SecureCRT - Remote Command Execution mailing-list
- 13275 third-party-advisory
- 11731 vdb-entry
- securecrt-folder-command-execution(18201) vdb-entry