CVE-2001-1466

CVE-2001-1466 describes a buffer overflow vulnerability in VanDyke SecureCRT versions prior to 3.4.2, specifically when utilizing the SSH-1 protocol. This flaw allows unauthenticated remote attackers to execute arbitrary code by supplying an excessively long username or password during the authentication process. The vulnerability carries a CVSS score of 7.5 (High), indicating a network-based attack with low complexity, requiring no authentication, and potentially leading to partial confidentiality, integrity, and availability compromise. While the vulnerability is old and has a high FAUCET Risk Score of 82/100, there is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding it.