PuTTY / WinSCP security vulnerabilities

SSH handshake heap buffer overflow, protection bypass, information leakage...

FileZilla Client < 3.7.2 SFTP Integer Overflow

The version of FileZilla Client on the remote host is a version prior to 3.7.2. As such, it is affected by an integer overflow vulnerability that exists in the 'getstring' function from PuTTY used to handle SFTP. This can lead to a heap overflow during the SSH handshake prior to authentication, d...

[SECURITY] [DSA 2736-1] putty security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2736-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 11, 2013 http://www.debian.org/security/faq -...

PuTTY 'getstring()'函数多个整数溢出漏洞

BUGTRAQ ID: 61599 CVECAN ID: CVE-2013-4852 PuTTY是Windows和Unix平台上的PuTTYTelnet和SSH的实现，带有xterm终端模拟器。 PuTTY 0.62在处理SSH握手时，负握手消息长度可触发堆缓冲区溢出漏洞，成功后可以当前用户权限执行任意代码。要利用此漏洞需要诱使用户连接到恶意服务器。 0 Simon Tatham PuTTY 0.61 Simon Tatham PuTTY 0.60 Simon Tatham PuTTY 0.59 Simon Tatham PuTTY 0.56 Simon Tatham PuTTY 0.5...

Updated putty and filezilla packages fixes security vulnerability

PuTTY versions 0.62 and earlier - as well as all software that integrates these versions of PuTTY - are vulnerable to an integer overflow leading to heap overflow during the SSH handshake before authentication, caused by improper bounds checking of the length parameter received from the SSH serve...