← Back

Van Dyke Technologies

van_dyke_technologies

8 CVEs • 4 products

Products (4)

Click to collapse
Toggle
Securecrt
securecrt
Vshell
vshell
Securefx
securefx
Entunnel
entunnel

CVEs (8)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Van Dyke Technologies
1Vshell
Apr 23, 2026
Nov 20, 2007
N/A· v4
N/A· v3
7.8 HIGH· v2
Unspecified vulnerability in VanDyke VShell 3.0.1 allows remote attackers to cause a denial of service via unspecified vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales...Show more
Unspecified vulnerability in VanDyke VShell 3.0.1 allows remote attackers to cause a denial of service via unspecified vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.Show less
1Van Dyke Technologies
2Securecrt
Securefx
Apr 16, 2026
Mar 7, 2006
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknown impact when a Unicode string is converted to a "narrow" string.
1Van Dyke Technologies
1Securecrt
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share.
1Van Dyke Technologies
3Entunnel
SecurecrtSecurefx
Apr 16, 2026
Feb 19, 2003
N/A· v4
N/A· v3
4.6 MEDIUM· v2
SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attac...Show more
SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.Show less
1Van Dyke Technologies
1Securecrt
Apr 16, 2026
Oct 4, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string.
1Van Dyke Technologies
1Securecrt
Apr 16, 2026
Dec 30, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password.
1Van Dyke Technologies
1Vshell
Apr 16, 2026
Jun 2, 2001
N/A· v4
N/A· v3
2.1 LOW· v2
VShell SSH gateway 1.0.1 and earlier has a default port forwarding rule of 0.0.0.0/0.0.0.0, which could allow local users to conduct arbitrary port forwarding to other systems.
1Van Dyke Technologies
1Vshell
Apr 16, 2026
Jun 2, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary commands via a user name that contains format string specifiers.