PT-2003-1332 · Vandyke · Securefx+2

Knud Erik Højgaard · Publicado 2003-02-01 · Atualizado 2016-10-18 · CVE-2003-0047

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SecureCRT versions 3.4.7 and 4.0.2 SecureFX versions 2.0.4 and 2.1.2 Entunnel versions 1.0.2 and earlier

Description The issue concerns the failure of SSH2 clients to clear logon credentials from memory. This includes plaintext passwords, which could be stolen by attackers with access to memory.

Recommendations For SecureCRT versions 3.4.7 and 4.0.2, update to a version that properly clears logon credentials from memory. For SecureFX versions 2.0.4 and 2.1.2, update to a version that properly clears logon credentials from memory. For Entunnel versions 1.0.2 and earlier, update to a version that properly clears logon credentials from memory.

Correção

Identificadores relacionados

CVE-2003-0047

Produtos afetados

Entunnel

Securecrt

Securefx

Referências · 9

• http://securityfocus.com/bid/6728 · Nota
• http://securitytracker.com/id?1006010 · Nota
• http://securityfocus.com/bid/6726 · Nota
• http://marc.info/?l=bugtraq&m=104386492422014&w=2 · Nota
• http://securitytracker.com/id?1006011 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0047 · Nota de Segurança
• http://idefense.com/advisory/01.28.03.txt · Aviso do Fabricante
• http://securityfocus.com/bid/6727 · Nota
• http://securitytracker.com/id?1006012 · Nota