2014 matches found
PuTTY < 0.57 SFTP Remote Buffer Overflow
Binary data 2637.prm...
iDEFENSE Security Advisory 02.21.05: Multiple PuTTY SFTP Client Packet Parsing Integer Overflow Vulnerabilities
Multiple PuTTY SFTP Client Packet Parsing Integer Overflow Vulnerabilities iDEFENSE Security Advisory 02.21.05: www.idefense.com/application/poi/display?id=201&type=vulnerabilities February 21, 2005 I. BACKGROUND PuTTY is a free implementation of Telnet and SSH for Win32 and Unix platforms, along...
GLSA-200502-28 : PuTTY: Remote code execution
The remote host is affected by the vulnerability described in GLSA-200502-28 PuTTY: Remote code execution Two vulnerabilities have been discovered in the PSCP and PSFTP clients, which can be triggered by the SFTP server itself. These issues are caused by the improper handling of the FXPREADDIR...
PuTTY SSH client integer overflow
Integer overflow in SFTP SSH File Transfer Protocol implementation...
CVE-2005-0467
Multiple integer overflows in the 1 sftppktgetstring and 2 fxpreaddirrecv functions in the PSFTP and PSCP clients for PuTTY 0.56, and possibly earlier versions, allow remote malicious web sites to execute arbitrary code via SFTP responses that corrupt the heap after insufficient memory has been...
CVE-2005-0467
Multiple integer overflows in the 1 sftppktgetstring and 2 fxpreaddirrecv functions in the PSFTP and PSCP clients for PuTTY 0.56, and possibly earlier versions, allow remote malicious web sites to execute arbitrary code via SFTP responses that corrupt the heap after insufficient memory has been...
CVE-2005-0467
Multiple integer overflows in the 1 sftppktgetstring and 2 fxpreaddirrecv functions in the PSFTP and PSCP clients for PuTTY 0.56, and possibly earlier versions, allow remote malicious web sites to execute arbitrary code via SFTP responses that corrupt the heap after insufficient memory has been...
[SA14333] PuTTY Two Integer Overflow Vulnerabilities
TITLE: PuTTY Two Integer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA14333 VERIFY ADVISORY: http://secunia.com/advisories/14333/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: PuTTY 0.x http://secunia.com/product/1137/ DESCRIPTION: Two vulnerabilities have be...
CVE-2001-0816
Technical details for CVE-2001-0816 are not provided in the connected documents. No confirmed affected products or fixes are available here. Monitor for updates.
CVE-2001-0816
OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass authorizedkeys2 command= restrictions using sftp commands...
PT-2001-1065 · Openssh +1 · Openssh +1
Name of the Vulnerable Software and Affected Versions: openssh-server versions 2.9p2 through 2.9.8 openssh-clients version 2.9p2 openssh version 2.9p2 openssh-askpass-gnome version 2.9p2 openssh-askpass version 2.9p2 Description: The issue affects the confidentiality, integrity, and availability ...
OpenSSH 2.5.x - 2.9 Multiple Vulnerabilities
According to its banner, the remote host appears to be running OpenSSH version between 2.5.x and 2.9. Such versions reportedly contain multiple vulnerabilities : - sftp-server does not respect the 'command=' argument of keys in the authorizedkeys2 file. CVE-2001-0816 - sshd does not properly hand...
OpenSSH: sftp & bypassing keypair auth restrictions
OpenSSH: sftp-server & bypassing keypair auth restrictions Summary: If you 1 are using keypairs and /.ssh/authorizedkeys2 to enable remote execution of commands via OpenSSH's sshd and 2 have sshd configured to provide sftp service via the sftp-server subsystem, then clients who have access with...