CVE-2002-1059

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 60.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-10-04 · updated 2026-06-16

Description

Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string.

Affected products

Van Dyke Technologies Securecrt: 2.4, 3.0, 3.1, 3.1.1, 3.1.2, 3.2 (+13)

References

http://marc.info/?l=bugtraq&m=102744150718462&w=2
http://marc.info/?l=bugtraq&m=102746007908689&w=2
http://www.iss.net/security_center/static/9650.php
http://www.osvdb.org/4991
http://www.securityfocus.com/bid/5287
http://www.vandyke.com/products/securecrt/security07-25-02.html
http://marc.info/?l=bugtraq&m=102744150718462&w=2
http://marc.info/?l=bugtraq&m=102746007908689&w=2
http://www.iss.net/security_center/static/9650.php
http://www.osvdb.org/4991
http://www.securityfocus.com/bid/5287
http://www.vandyke.com/products/securecrt/security07-25-02.html

Get alerted when CVE-2002-1059 or the next vulnerability affects your stack