CVE-2002-1059: Van Dyke Technologies Securecrt

High severity, CVSS 7.5. EPSS: 60.3% chance of exploitation in the next 30 days.

Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string.

Affected products

• Van Dyke Technologies Securecrt: version 2.4 only; version 3.0 only; version 3.1 only; version 3.1.1 only; version 3.1.2 only; version 3.2 only; …

Published 2002-10-04. Last modified 2026-06-16.