CVE-2004-1541

Name of the Vulnerable Software and Affected Versions SecureCRT versions 4.0 through 4.1

Description The issue allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share.

Recommendations For versions 4.0 and 4.1, consider disabling the use of the /F option to specify configuration files from samba shares until a patch is available. As a temporary workaround, restrict access to configuration files on samba shares to minimize the risk of exploitation.