CVE-2006-1038: Van Dyke Technologies Securecrt

High severity, CVSS 10.0. EPSS: 3.1% chance of exploitation in the next 30 days.

Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknown impact when a Unicode string is converted to a "narrow" string.

Affected products

• Van Dyke Technologies Securecrt: version 5.0 only; version 5.0.1 only; version 5.0.2 only; version 5.0.3 only; version 5.0.4 only; version 5.0_beta_1 only; …
• Van Dyke Technologies Securefx: version 3.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; version 3.0_beta_1 only; …

Published 2006-03-07. Last modified 2026-06-16.