PSFTP v.1.8 Build 921 - Null Pointer (DoS) Vulnerability

Document Title: =============== PSFTP v.1.8 Build 921 - Null Pointer DoS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=523 Release Date: ============= 2012-04-22 Vulnerability Laboratory ID VL-ID: ==================================== 523...

PSFTP v.1.8 Build 921 - Null Pointer (DoS) Vulnerability

Document Title: =============== PSFTP v.1.8 Build 921 - Null Pointer DoS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=523 Release Date: ============= 2012-04-22 Vulnerability Laboratory ID VL-ID: ==================================== 523...

FreeBSD : putty -- pscp/psftp heap corruption vulnerabilities (a413ed94-836e-11d9-a9e7-0001020eed82)

Simon Tatham reports : This version fixes a security hole in previous versions of PuTTY, which can allow a malicious SFTP server to attack your client. If you use either PSCP or PSFTP, you should upgrade. Users of the main PuTTY program are not affected. However, note that the server must have...

CVE-2005-0467

CVE-2005-0467 affects PuTTY PSFTP/PSCP clients (up to and including 0.56; possibly earlier) via two heap-corruption vulnerabilities: improper handling in sftp_pkt_getstring and fxp_readdir_recv that can enable remote code execution when interacting with a malicious SFTP server. A patch/mitigation...

CVE-2005-0467

Multiple integer overflows in the 1 sftppktgetstring and 2 fxpreaddirrecv functions in the PSFTP and PSCP clients for PuTTY 0.56, and possibly earlier versions, allow remote malicious web sites to execute arbitrary code via SFTP responses that corrupt the heap after insufficient memory has been...

PuTTY: Remote code execution

Background PuTTY is a popular SSH client, PSCP is a secure copy implementation, and PSFTP is a SSH File Transfer Protocol client. Description Two vulnerabilities have been discovered in the PSCP and PSFTP clients, which can be triggered by the SFTP server itself. These issues are caused by the...

putty -- pscp/psftp heap corruption vulnerabilities

Simon Tatham reports: This version fixes a security hole in previous versions of PuTTY, which can allow a malicious SFTP server to attack your client. If you use either PSCP or PSFTP, you should upgrade. Users of the main PuTTY program are not affected. However, note that the server must have...