QwikSec

Security Database

CVE

CWE

Training

CVE-2013-4852

Published: Aug 19, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in certain applications that use PuTTY via a negative size value in an RSA key signature during the SSH handshake, which triggers a heap-based buffer overflow.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_SECUNIA

third-party-advisory

x_refsource_SECUNIA

http://winscp.net/tracker/show_bug.cgi?id=1017

x_refsource_MISC

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=718779

x_refsource_CONFIRM

http://www.search-lab.hu/advisories/secadv-20130722

x_refsource_MISC

vendor-advisory

x_refsource_DEBIAN

http://svn.tartarus.org/sgt?view=revision&sortby=date&revision=9896

x_refsource_MISC

openSUSE-SU-2013:1347

vendor-advisory

x_refsource_SUSE

third-party-advisory

x_refsource_SECUNIA

http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-signature-stringlen.html

x_refsource_CONFIRM

openSUSE-SU-2013:1355

vendor-advisory

x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.