Van Dyke SecureCRT SSH2 Authentication Password Persistence Weakness

Bugtraq ID:	6726
Class:	Design Error
CVE:	CVE-2003-0047
Remote:	No
Local:	Yes
Published:	Jan 29 2003 12:00AM
Updated:	Jul 11 2009 08:06PM
Credit:	Discovery credited to Knud Erik Højgaard <[email protected]>.
Vulnerable:	VanDyke SecureCRT 4.0.2 VanDyke SecureCRT 3.4.7
Not Vulnerable:	VanDyke SecureCRT 4.0.3 VanDyke SecureCRT 3.4.8

Van Dyke SecureCRT SSH2 Authentication Password Persistence Weakness

It has been reported that SecureCRT does not safely handle password information. As a result, a local user may be able to recover authentication passwords.

Van Dyke SecureCRT SSH2 Authentication Password Persistence Weakness

No exploit is required for this vulnerability.

Van Dyke SecureCRT SSH2 Authentication Password Persistence Weakness

Solution:
Van Dyke Software has made fixes available:


VanDyke SecureCRT 3.4.7

• Van Dyke Technologies SecureCRT 3.4.8
  http://www.vandyke.com/download/securecrt/3.4/index.html

VanDyke SecureCRT 4.0.2

• Van Dyke Technologies SecureCRT 4.0.3
  http://www.vandyke.com/download/securecrt/index.html

Van Dyke SecureCRT SSH2 Authentication Password Persistence Weakness

References:

• Advisory Notification Van Dyke SecureCRT Discloses Password to Local Users (Full Disclosure)
  
• iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords ("iDEFENSE Labs" )