Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password.Referenceshttp://archives.neohapsis.com/archives/vuln-dev/2001-q4/0967.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/10111http://www.kb.cert.org/vuls/id/216227