CVE-2002-1059 describes a critical buffer overflow vulnerability in Van Dyke SecureCRT SSH client versions prior to 3.4.6 and 4.0 beta 3. An attacker, operating as a malicious SSH server, could exploit this flaw by sending an excessively long SSH1 protocol version string, leading to arbitrary code execution on the client system. This vulnerability carries a CVSS score of 7.5, indicating high severity with a network-based attack vector and low attack complexity, potentially resulting in complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, public exploit code and a Metasploit module are available, suggesting a high potential for exploitation. Despite this, there is no recorded community discussion or media coverage, which is typical for a CVE of this age.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.4CPE matchmatch criteria | cpe:2.3:a:van_dyke_technologies:securecrt:2.4:*:*:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:a:van_dyke_technologies:securecrt:3.0:*:*:*:*:*:*:* | ||
3.1CPE matchmatch criteria | cpe:2.3:a:van_dyke_technologies:securecrt:3.1:*:*:*:*:*:*:* | ||
3.1.1CPE matchmatch criteria | cpe:2.3:a:van_dyke_technologies:securecrt:3.1.1:*:*:*:*:*:*:* | ||
3.1.2CPE matchmatch criteria | cpe:2.3:a:van_dyke_technologies:securecrt:3.1.2:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.