Debian DSA-2736-1 : putty - several vulnerabilities

Several vulnerabilities where discovered in PuTTY, a Telnet/SSH client for X. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-4206 Mark Wooding discovered a heap-corrupting buffer underrun bug in the modmul function which performs modular...

FileZilla Client < 3.7.2 SFTP Integer Overflow

The version of FileZilla Client on the remote host is a version prior to 3.7.2. As such, it is affected by an integer overflow vulnerability that exists in the 'getstring' function from PuTTY used to handle SFTP. This can lead to a heap overflow during the SSH handshake prior to authentication, d...

PuTTY 0.52 to 0.62 Multiple Vulnerabilities

The remote host has an installation of PuTTY version 0.52 or greater but earlier than version 0.63. As such, it is reportedly affected by the following vulnerabilities : - An overflow error exists in the function 'modmul' in the file 'putty/sshbn.c' that could allow heap corruption when handling...

PuTTY < 0.63 Multiple Vulnerabilities

Binary data 6987.prm...

[SECURITY] [DSA 2736-1] putty security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2736-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 11, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2736-1] putty security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2736-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 11, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2736-1 (putty - several vulnerabilities)

Several vulnerabilities where discovered in PuTTY, a Telnet/SSH client for X. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-4206 Mark Wooding discovered a heap-corrupting buffer underrun bug in the modmul function which performs modular multiplicatio...

PuTTY 私钥'putty/sshdss.c' 多个信息泄露漏洞

BUGTRAQ ID: 61644 CVECAN ID: CVE-2013-4208 PuTTY是Windows和Unix平台上的PuTTYTelnet和SSH的实现，带有xterm终端模拟器。 PuTTY 0.52 - 0.63在设计中并没有考虑及时擦除内存中的敏感数据，比如密钥等，恶意攻击者可以从PuTTY内存中或者崩溃DUMP中获得密钥或其它敏感信息。 0 PuTTY 0.52 - 0.63 厂商补丁： Simon Tatham ------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

PuTTY 'getstring()'函数多个整数溢出漏洞

BUGTRAQ ID: 61599 CVECAN ID: CVE-2013-4852 PuTTY是Windows和Unix平台上的PuTTYTelnet和SSH的实现，带有xterm终端模拟器。 PuTTY 0.62在处理SSH握手时，负握手消息长度可触发堆缓冲区溢出漏洞，成功后可以当前用户权限执行任意代码。要利用此漏洞需要诱使用户连接到恶意服务器。 0 Simon Tatham PuTTY 0.61 Simon Tatham PuTTY 0.60 Simon Tatham PuTTY 0.59 Simon Tatham PuTTY 0.56 Simon Tatham PuTTY 0.5...

PuTTY 'modmul()' 函数缓冲区下溢漏洞(CVE-2013-4206)

No description provided by source...

PuTTY DSA签名远程缓冲区溢出漏洞(CVE-2013-4207)

BUGTRAQ ID: 61649 CVECAN ID: CVE-2013-4207 PuTTY是Windows和Unix平台上的PuTTYTelnet和SSH的实现，带有xterm终端模拟器 PuTTY 0.52 - 0.63在验证DSA签名的模逆计算中存在缓冲区溢出漏洞，攻击者可以使用此漏洞进行拒绝服务攻击甚至执行任意代码 0 Simon Tatham PuTTY 0.52 - 0.63 厂商补丁： Simon Tatham ------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

DSA-2736-1 putty - several

Bulletin has no description...

Debian: Security Advisory (DSA-2736-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2013-0242 Updated putty and filezilla packages fixes security vulnerability

PuTTY versions 0.62 and earlier - as well as all software that integrates these versions of PuTTY - are vulnerable to an integer overflow leading to heap overflow during the SSH handshake before authentication, caused by improper bounds checking of the length parameter received from the SSH serve...

Updated putty and filezilla packages fixes security vulnerability

PuTTY versions 0.62 and earlier - as well as all software that integrates these versions of PuTTY - are vulnerable to an integer overflow leading to heap overflow during the SSH handshake before authentication, caused by improper bounds checking of the length parameter received from the SSH serve...

FreeBSD : PuTTY -- Four security holes in versions before 0.63 (4b448a96-ff73-11e2-b28d-080027ef73ec)

Simon Tatham reports : This 0.63 release fixes multiple security holes in previous versions of PuTTY, which can allow an SSH-2 server to make PuTTY overrun or underrun buffers and crash. ... These vulnerabilities can be triggered before host key verification, which means that you are not even saf...

PuTTY SSH handshake heap overflow

PuTTY SSH handshake heap overflow CVE-2013-4852 Description: PuTTY versions 0.62 and earlier - as well as all software that integrates these versions of PuTTY - are vulnerable to an integer overflow leading to heap overflow during the SSH handshake before authentication, caused by improper bounds...

PuTTY -- Four security holes in versions before 0.63

Simon Tatham reports: This 0.63 release fixes multiple security holes in previous versions of PuTTY, which can allow an SSH-2 server to make PuTTY overrun or underrun buffers and crash. ... These vulnerabilities can be triggered before host key verification, which means that you are not even safe...

Portable Multi-boot Security Suite: Katana

Katana is a portable multi-boot security suite which brings together many of today’s best security distributions and portable applications to run off a single Flash Drive. It includes distributions which focus on Pen-Testing, Auditing, Forensics, System Recovery, Network Analysis, and Malware...

FreeBSD Ports: putty

The remote host is missing an update to the system as announced in the referenced advisory. VID bbd5f486-24f1-11e1-95bc-080027ef73ec OpenVAS Vulnerability Test $ Description: Auto generated from VID bbd5f486-24f1-11e1-95bc-080027ef73ec Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...