VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 19, 2003· Updated Jun 16, 2026

CVE-2003-0047

CVE-2003-0047

Description

SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Van Dyke Technologies/Entunnel2 versions
    cpe:2.3:a:van_dyke_technologies:entunnel:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:van_dyke_technologies:entunnel:*:*:*:*:*:*:*:*range: <=1.0.2
    • (no CPE)range: <=1.0.2
  • Van Dyke Technologies/Securecrt3 versions
    cpe:2.3:a:van_dyke_technologies:securecrt:3.4.7:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:van_dyke_technologies:securecrt:3.4.7:*:*:*:*:*:*:*
    • cpe:2.3:a:van_dyke_technologies:securecrt:4.0.2:*:*:*:*:*:*:*
    • (no CPE)range: 4.0.2, 3.4.7
  • Van Dyke Technologies/Securefx3 versions
    cpe:2.3:a:van_dyke_technologies:securefx:2.0.4:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:van_dyke_technologies:securefx:2.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:van_dyke_technologies:securefx:2.1.2:*:*:*:*:*:*:*
    • (no CPE)range: 2.1.2, 2.0.4

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.