274 matches found
[SECURITY] Fedora 19 Update: putty-0.63-1.fc19
Putty is a SSH, Telnet & Rlogin client - this time for Linux...
[SECURITY] [DSA 2736-1] putty security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2736-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 11, 2013 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2736-1] putty security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2736-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 11, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2736-1 (putty - several vulnerabilities)
Several vulnerabilities where discovered in PuTTY, a Telnet/SSH client for X. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-4206 Mark Wooding discovered a heap-corrupting buffer underrun bug in the modmul function which performs modular multiplicatio...
CentOS 4 : openssh (CESA-2007:0257)
Updated openssh packages that fix a security issue and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This package includes the core files necessary for...
Scientific Linux Security Update : openssh on SL6.x i386/x86_64 (20130221)
Due to the way the pamsshagentauth PAM module was built in Scientific Linux 6, the glibc's error function was called rather than the intended error function in pamsshagentauth to report errors. As these two functions expect different arguments, it was possible for an attacker to cause an...
RedHat Update for openssh RHSA-2013:0519-02
Check for the Version of openssh OpenVAS Vulnerability Test RedHat Update for openssh RHSA-2013:0519-02 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
On Windows, Fisheye attempts to make ssh keys private but appears to be unsucessful
While testing FE-4315 on Windows, I noticed that even when generating a private key using Fisheye, the files permissions do not appear to actually change. The code to make the file private is this, in FileSystemUtils: code if SystemUtils.ISOSWINDOWS String username = System.getenv"USERNAME"; Stri...
Fedora 18 : dracut-024-5.git20121019.fc18 (2012-16448)
fixed ifup exit code - fixed default 'rd.auto' parameter setting - only 'warn' not 'error', if we don't strip the initramfs - do not overwrite ifcfg from anaconda - ssh-client module fixes - strip binaries in the initramfs by default now - fixes for systemd and crypto - new dracut kernel command...
Scientific Linux Security Update : openssh on SL5.x i386/x86_64
CVE-2008-5161 OpenSSH: Plaintext Recovery Attack against CBC ciphers A flaw was found in the SSH protocol. An attacker able to perform a man-in-the-middle attack may be able to obtain a portion of plain text from an arbitrary ciphertext block when a CBC mode cipher was used to encrypt SSH...
PuTTY Detection
The remote host has an installation of PuTTY, which is a suite of tools for remote console access and file transfer. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57364; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/12/30";...
SSH Client login detected (realtime)
Binary data 6089.prm...
freeFTPd 1.0.10 - Key Exchange Algorithm String Buffer Overflow (Metasploit)
$Id: freeftpdkeyexchange.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
FreeFTPd 1.0.10 Key Exchange Algorithm String Buffer Overflow
This module exploits a simple stack buffer overflow in FreeFTPd 1.0.10 This flaw is due to a buffer overflow error when handling a specially crafted key exchange algorithm string received from an SSH client. This module is based on MC's freesshdkeyexchange exploit. This module requires Metasploit...
FreeFTPd 1.0.10 Key Exchange Algorithm String Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'FreeFTPd...
PuTTy.exe <= v0.53 Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3 'PuTTy.exe %q This module exploi...
Riorey RIOS Hardcoded Password Vulnerability 4.7.0
No description provided by source. Severity: High Full root access to the device Date: 07 October 2009 Versions Affected: RIOS 4.6.6 , 4.7.0 possibly others Discovered on: 25 July 2009 Vendor URL: www.riorey.com Author: Marek Kroemeke Overview: Riorey DDoS mitigation appliences www.riorey.com are...
Riorey RIOS Hardocded Password
Title: Riorey "RIOS" Hardcoded Password Vulnerability Severity: High Full root access to the device Date: 07 October 2009 Versions Affected: RIOS 4.6.6 , 4.7.0 possibly others Discovered on: 25 July 2009 Vendor URL: www.riorey.com Author: Marek Kroemeke Overview: Riorey DDoS mitigation appliences...
FreeSSHD Key Exchange Buffer Overflow
A vulnerable version of FreeSSHd is installed on the remote host. Description : The version installed does not validate key exchange strings send by a SSH client. This results in a buffer overflow and possible a compromise of the host if the client is sending a long key exchange string. OpenVAS...
Dropbear SSH <= 0.34 Remote Root Exploit
No description provided by source. / Linux x86 Dropbear SSH = 0.34 remote root exploit coded by live You'll need a hacked ssh client to try this out. I included a patch to openssh-3.6.p1 somewhere below this comment. The point is: the buffer being exploited is too small25 bytes to hold our...