CVE

Id
6876  
CVE No.
CVE-2003-0047  
Status
Candidate  
Description
SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.  
Phase
Modified (20071121)  
Votes
ACCEPT(2) Baker, Stracener | NOOP(4) Cole, Cox, Green, Wall  
Comments
Green> MULTIPLE VENDORS INVOLVED | Stracener> I"m going to go with this because at least two of the affected vendors acknowledged a fix in the original advisory.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
39221 6876 CVE-2003-0047 BUGTRAQ:20030129 iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords  View
39222 6876 CVE-2003-0047 URL:http://marc.info/?l=bugtraq&m=104386492422014&w=2  View
39223 6876 CVE-2003-0047 MISC:http://www.idefense.com/advisory/01.28.03.txt  View
39224 6876 CVE-2003-0047 BID:6726  View
39225 6876 CVE-2003-0047 URL:http://www.securityfocus.com/bid/6726  View
39226 6876 CVE-2003-0047 BID:6727  View
39227 6876 CVE-2003-0047 URL:http://www.securityfocus.com/bid/6727  View
39228 6876 CVE-2003-0047 BID:6728  View
39229 6876 CVE-2003-0047 URL:http://www.securityfocus.com/bid/6728  View
39230 6876 CVE-2003-0047 SECTRACK:1006010  View
39231 6876 CVE-2003-0047 URL:http://www.securitytracker.com/id?1006010  View
39232 6876 CVE-2003-0047 SECTRACK:1006011  View
39233 6876 CVE-2003-0047 URL:http://www.securitytracker.com/id?1006011  View
39234 6876 CVE-2003-0047 SECTRACK:1006012  View

Related JVN