931 matches found
PuTTY hijacking vulnerability
PuTTY is a suite of free Telnet, Rlogin and SSH client software from Simon Tatham Software Developers. The software is primarily used for remote administration of Linux systems. A security vulnerability exists in PuTTY Windows versions prior to 0.71. A local attacker could exploit the vulnerabili...
CVE-2019-9894: Undefined Security Weakness
A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification...
PuTTY buffer overflow vulnerability
PuTTY is a suite of free Telnet, Rlogin and SSH client software from Simon Tatham Software Developers. The software is primarily used for remote administration of Linux systems. A buffer overflow vulnerability exists in the server-to-client forwarding process in PuTTY Unix versions prior to 0.71....
PuTTY Random Number Reuse Vulnerability
PuTTY is a free implementation of SSH and Telnet for Windows and Unix platforms and an xterm terminal emulator. A random number reuse vulnerability exists in PuTTY versions prior to 0.71 used in cryptography. An attacker can exploit this vulnerability to potentially recycle random numbers used in...
CVE-2019-9898: Use of Insufficiently Random Values
Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71...
CVE-2019-9897: Undefined Security Weakness
Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71...
PuTTY Denial of Service Vulnerability (CNVD-2019-22448)
PuTTY is a free implementation of SSH and Telnet for Windows and Unix platforms and an xterm terminal emulator. A denial of service vulnerability exists in PuTTY versions prior to 0.71. An attacker can exploit this vulnerability by writing to a terminal, resulting in a denial of service...
PuTTY memory overwrite vulnerability
PuTTY is a free implementation of SSH and Telnet for Windows and Unix platforms and an xterm terminal emulator. A memory overwrite vulnerability exists in PuTTY versions prior to 0.71. A remote attacker can exploit this vulnerability to overwrite memory...
CVE-2019-9895: Improper Restriction of Operations within the Bounds of a Memory Buffer
In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding...
PuTTY Releases Important Software Update to Patch 8 High-Severity Flaws
The popular SSH client program PuTTY has released the latest version of its software that includes security patches for 8 high-severity security vulnerabilities. PuTTY is one of the most popular and widely used open-source client-side programs that allows users to remotely access computers over...
PuTTY Releases Important Software Update to Patch 8 High-Severity Flaws
The popular SSH client program PuTTY has released the latest version of its software that includes security patches for 8 high-severity security vulnerabilities. PuTTY is one of the most popular and widely used open-source client-side programs that allows users to remotely access computers over...
FreeBSD : PuTTY -- security fixes in new release (46e1ece5-48bd-11e9-9c40-080027ac955c)
The PuTTY team reports : New in 0.71 : - Security fixes found by an EU-funded bug bounty programme : - + a remotely triggerable memory overwrite in RSA key exchange, which can occur before host key verification - + potential recycling of random numbers used in cryptography - + on Unix, remotely...
PuTTY -- security fixes in new release
The PuTTY team reports: New in 0.71: Security fixes found by an EU-funded bug bounty programme: + a remotely triggerable memory overwrite in RSA key exchange, which can occur before host key verification + potential recycling of random numbers used in cryptography + on Unix, remotely triggerable...
PuTTY (European Commission - DIGIT): Assertion `col >= 0 && col < line->cols' failed, process aborted while streaming ouput from remote server
Summary: During the course of testing putty-0.70-2019-03-01.e0a7697 on Fedora 29 compiled with clang version 7.0.1 Fedora 7.0.1-4.fc29, we discovered it was possible to abort a remote client by streaming data at it in such a way as to trigger an assertion failure in terminal.c. putty:...
Trickbot Malware Goes After Remote Desktop Credentials
The banking trojan known as Trickbot has resurfaced, with an updated info-stealing module that allows it to harvest remote desktop application credentials. According to Trend Micro’s Noel Anthony Llimos and Carl Maverick Pascual, a new variant has recently come on the scene, and is being spread v...
PuTTY (European Commission - DIGIT): Assertion `len == 1' failed, process aborted while streaming ouput from remote server
Summary: During the course of testing putty-0.70-2019-02-12.75dda5e on Fedora 29 compiled with clang version 7.0.1 Fedora 7.0.1-1.fc29, we discovered it was possible to abort a remote client by streaming data at it in such a way as to trigger an assertion failure. putty: unix/gtkwin.c:3801: void...
PuTTY (European Commission - DIGIT): puttygen: heap-buffer-overflow in mp_get_decimal()
Summary: After downloading putty-0.70-2019-01-17.53747ad.tar.gz, I compiled it on Debian 9 with Clang-8.0.0 and AddressSanitizer and while trying to extract a public key from a crafted key file, I triggered a heap-buffer-overflow in mpgetdecimal. Description: A buffer overflow condition exists wh...
PuTTY (European Commission - DIGIT): heap-use-after-free (READ of size 8) in main()
Summary: After downloading putty-0.70-2019-01-17.53747ad.tar.gz, I compiled it on Debian 9 with Clang-8.0.0 and AddressSanitizer and while trying to extract a public key from a crafted key, I triggered a heap-use-after-free in main. Description: add more details about this vulnerability Steps To...
PuTTY SCP Multiple Spoofing Vulnerabilities - Windows
PuTTY is prone to multiple spoofing vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:putty:putty"; ifdescription...
