Updated putty and filezilla packages fixes security vulnerability

PuTTY versions 0.62 and earlier - as well as all software that integrates these versions of PuTTY - are vulnerable to an integer overflow leading to heap overflow during the SSH handshake before authentication, caused by improper bounds checking of the length parameter received from the SSH serve...

PT-2013-4898

Name of the Vulnerable Software and Affected Versions PuTTY versions prior to 0.63 Description A buffer overflow issue exists due to improper handling of an invalid DSA signature during computation of a modular inverse. This can cause a division by zero, triggering the overflow by the bignum...

PT-2013-4899

Name of the Vulnerable Software and Affected Versions PuTTY versions prior to 0.63 Description The issue concerns the rsa verify function, which does not properly clear sensitive process memory after use and fails to free certain structures containing sensitive process memory. This could...

PT-2013-5243

Name of the Vulnerable Software and Affected Versions PuTTY versions 0.62 and earlier WinSCP versions prior to 5.1.6 Description The issue is related to an integer overflow that can occur when a remote SSH server sends a negative size value in an RSA key signature during the SSH handshake. This c...

PT-2013-4897

Name of the Vulnerable Software and Affected Versions PuTTY versions prior to 0.63 Description A heap-based buffer underflow issue exists in the modmul function in sshbn.c, which can be triggered by remote SSH servers sending a crafted DSA signature. This can cause a denial of service crash and...

FreeBSD : PuTTY -- Four security holes in versions before 0.63 (4b448a96-ff73-11e2-b28d-080027ef73ec)

Simon Tatham reports : This 0.63 release fixes multiple security holes in previous versions of PuTTY, which can allow an SSH-2 server to make PuTTY overrun or underrun buffers and crash. ... These vulnerabilities can be triggered before host key verification, which means that you are not even saf...

PuTTY SSH handshake heap overflow

PuTTY SSH handshake heap overflow CVE-2013-4852 Description: PuTTY versions 0.62 and earlier - as well as all software that integrates these versions of PuTTY - are vulnerable to an integer overflow leading to heap overflow during the SSH handshake before authentication, caused by improper bounds...

PuTTY -- Four security holes in versions before 0.63

Simon Tatham reports: This 0.63 release fixes multiple security holes in previous versions of PuTTY, which can allow an SSH-2 server to make PuTTY overrun or underrun buffers and crash. ... These vulnerabilities can be triggered before host key verification, which means that you are not even safe...

Portable Multi-boot Security Suite: Katana

Katana is a portable multi-boot security suite which brings together many of today’s best security distributions and portable applications to run off a single Flash Drive. It includes distributions which focus on Pen-Testing, Auditing, Forensics, System Recovery, Network Analysis, and Malware...

FreeBSD Ports: putty

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: putty

The remote host is missing an update to the system as announced in the referenced advisory. VID bbd5f486-24f1-11e1-95bc-080027ef73ec OpenVAS Vulnerability Test $ Description: Auto generated from VID bbd5f486-24f1-11e1-95bc-080027ef73ec Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Putty Denial of Service Vulnerability

This host is installed with Putty and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodputtydosvulnwin.nasl 6519 2017-07-04 14:08:14Z cfischer $ Putty Denial of Service Vulnerability Authors: Madhuri D Copyright: Copyright c 2011 SecPod, http://www.secpod.com Thi...

PuTTY DoS Vulnerability

PuTTY is prone to denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:putty:putty"; ifdescriptio...

PuTTY 0.60 Denial Of Service (DOS)

No description provided by source. print "\n" print "----------------------------------------------------------------" print "| putty 0.60 Null Ptr |" print "| Level Smash the Stack |" print "----------------------------------------------------------------" print "\n" import sys, socket, binascii...

Putty 0.60 Denial Of Service

print "\n" print "----------------------------------------------------------------" print "| putty 0.60 Null Ptr |" print "| Level Smash the Stack |" print "----------------------------------------------------------------" print "\n" import sys, socket, binascii HOST = sys.argv1 PORT = 22 s =...

putty 0.60 Denial Of Service

Exploit for windows platform in category dos / poc print "\n" print "----------------------------------------------------------------" print "| putty 0.60 Null Ptr |" print "| Level Smash the Stack |" print "----------------------------------------------------------------" print "\n" import sys,...

Putty 0.60 - Crash (PoC)

Putty 0.60 - Crash PoC print "\n" print "----------------------------------------------------------------" print "| putty 0.60 Null Ptr |" print "| Level Smash the Stack |" print "----------------------------------------------------------------" print "\n" import sys, socket, binascii HOST =...

Putty 0.60 - Crash (PoC)

print "\n" print "----------------------------------------------------------------" print "| putty 0.60 Null Ptr |" print "| Level Smash the Stack |" print "----------------------------------------------------------------" print "\n" import sys, socket, binascii HOST = sys.argv1 PORT = 22 s =...

PuTTY Detection

The remote host has an installation of PuTTY, which is a suite of tools for remote console access and file transfer. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57364; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/12/30";...

PuTTY Password Local Information Disclosure

The remote host has an installation of PuTTY between 0.59 and 0.61, inclusive. Such versions are known to contain an information disclosure issue, where PuTTY neglects to wipe passwords from memory that it no longer requires. Note that to exploit this vulnerability, a malicious, local process mus...