BID:16935

Van Dyke SecureCRT and SecureFX Buffer Overflow Vulnerability

Info

Van Dyke SecureCRT and SecureFX Buffer Overflow Vulnerability

Bugtraq ID:	16935
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 03 2006 12:00AM
Updated:	Mar 08 2006 08:35AM
Credit:	Announced by the vendor.
Vulnerable:	VanDyke SecureFX 3.0.4 VanDyke SecureFX 2.1.3 VanDyke SecureFX 2.1.2 VanDyke SecureFX 2.1.1 VanDyke SecureFX 2.0.5 VanDyke SecureFX 2.0.4 VanDyke SecureCRT 5.0.4 VanDyke SecureCRT 4.1.9 VanDyke SecureCRT 4.1.8 VanDyke SecureCRT 4.1.7 VanDyke SecureCRT 4.1.6 VanDyke SecureCRT 4.1.5 VanDyke SecureCRT 4.1.4 VanDyke SecureCRT 4.1.3 VanDyke SecureCRT 4.1.2 VanDyke SecureCRT 4.1.1 VanDyke SecureCRT 4.1 VanDyke SecureCRT 4.0.5 VanDyke SecureCRT 4.0.4 VanDyke SecureCRT 4.0.3 VanDyke SecureCRT 4.0.2 VanDyke SecureCRT 4.0.1 VanDyke SecureCRT 4.0 beta 3 VanDyke SecureCRT 4.0 beta 2 VanDyke SecureCRT 4.0 beta 1 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional VanDyke SecureCRT 3.4.8 VanDyke SecureCRT 3.4.7 VanDyke SecureCRT 3.4.6 VanDyke SecureCRT 3.4.5 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional VanDyke SecureCRT 3.4.4 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional VanDyke SecureCRT 3.4.3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional VanDyke SecureCRT 3.4.2 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional VanDyke SecureCRT 3.4.1 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional VanDyke SecureCRT 3.4 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional VanDyke SecureCRT 3.3.4 VanDyke SecureCRT 3.3.3 VanDyke SecureCRT 3.3.2 VanDyke SecureCRT 3.3.1 VanDyke SecureCRT 3.3 VanDyke SecureCRT 3.2.2 VanDyke SecureCRT 3.2.1 VanDyke SecureCRT 3.2 VanDyke SecureCRT 3.1.2 VanDyke SecureCRT 3.1.1 VanDyke SecureCRT 3.1 VanDyke SecureCRT 3.0 VanDyke SecureCRT 2.4

Not Vulnerable:	VanDyke SecureFX 3.0.5 VanDyke SecureCRT 5.0.5

Discussion

Van Dyke SecureCRT and SecureFX Buffer Overflow Vulnerability

Van Dyke SecureCRT and SecureFX are prone to a buffer-overflow vulnerability when converting Unicode strings. An attacker could potentially exploit this to execute arbitrary code or cause a denial of service.

SecureCRT versions 5.0.4 and earlier are affected. SecureFX versions 3.0.4 and earlier are affected.

Exploit / POC

Van Dyke SecureCRT and SecureFX Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Solution / Fix

Van Dyke SecureCRT and SecureFX Buffer Overflow Vulnerability

Solution:

This issue has been addressed in SecureCRT 5.0.5 and SecureFX 3.0.5:

VanDyke SecureFX 2.0.4