← Vulnerability feed

Vulnerability record · CVE-2004-1541 · published 31 December 2004

CVE-2004-1541: Van dyke technologies securecrt vulnerability

Van Dyke Technologies · Securecrt

SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share.

7.5 CVSS 2.0 High EPSS 2.1% · top 19.2%
7.5CVSS 2.0 base score
2.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=110129164332226&w=2
http://secunia.com/advisories/13275/ PatchVendor Advisory
http://www.securityfocus.com/bid/11731 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18201
http://marc.info/?l=bugtraq&m=110129164332226&w=2
http://secunia.com/advisories/13275/ PatchVendor Advisory
http://www.securityfocus.com/bid/11731 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18201

Track CVE-2004-1541 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2006-1038Van dyke technologies securecrt vulnerabilityBuffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknown impact when a Unicode string…EPSS 3.1%7.5CVE-2002-1059SecureCRT SSH client buffer overflow via SSH1 version stringVan Dyke SecureCRT SSH client versions before 3.4.6 and 4.x before 4.0 beta 3 contain a buffer overflow when handling a long SSH1 protocol version st…EPSS 60%analysed7.5CVE-2001-1466Van dyke technologies securecrt vulnerabilityBuffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) us…EPSS 4.0%4.6CVE-2003-0047Van dyke technologies entunnel vulnerabilitySSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credenti…EPSS 0.48%

Source: NIST National Vulnerability Database (record CVE-2004-1541), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.