diff options
| author | simon <simon@FreeBSD.org> | 2005-02-21 02:53:25 +0800 |
|---|---|---|
| committer | simon <simon@FreeBSD.org> | 2005-02-21 02:53:25 +0800 |
| commit | 7db383cb60c1dd2344a5da7c60d37b0eb0c55be7 (patch) | |
| tree | c3f2f4f4bb952faa8a193e84ceb9e5390df2f2a4 | |
| parent | 8fd9ce90f5a2257be7a1268d7301c8940e086179 (diff) | |
| download | freebsd-ports-gnome-7db383cb60c1dd2344a5da7c60d37b0eb0c55be7.tar.gz freebsd-ports-gnome-7db383cb60c1dd2344a5da7c60d37b0eb0c55be7.tar.zst freebsd-ports-gnome-7db383cb60c1dd2344a5da7c60d37b0eb0c55be7.zip | |
Document heap corruption vulnerabilities in putty.
| -rw-r--r-- | security/vuxml/vuln.xml | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 624e41ad2de2..c46871451862 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,40 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="a413ed94-836e-11d9-a9e7-0001020eed82"> + <topic>putty -- pscp/psftp heap corruption vulnerabilities</topic> + <affects> + <package> + <name>putty</name> + <range><lt>0.57</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Simon Tatham reports:</p> + <blockquote cite="http://lists.tartarus.org/pipermail/putty-announce/2005/000012.html"> + <p>This version fixes a security hole in previous versions + of PuTTY, which can allow a malicious SFTP server to + attack your client. If you use either PSCP or PSFTP, you + should upgrade. Users of the main PuTTY program are not + affected. (However, note that the server must have passed + host key verification before this attack can be launched, + so a man-in-the-middle shouldn't be able to attack you if + you're careful.)</p> + </blockquote> + </body> + </description> + <references> + <mlist msgid="E1D2taM-0005R1-00@ixion.tartarus.org">http://lists.tartarus.org/pipermail/putty-announce/2005/000012.html</mlist> + <url>http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-readdir.html</url> + <url>http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-string.html</url> + </references> + <dates> + <discovery>2005-02-20</discovery> + <entry>2005-02-20</entry> + </dates> + </vuln> + <vuln vid="29dd0065-81fa-11d9-a9e7-0001020eed82"> <topic>kdelibs -- insecure temporary file creation</topic> <affects> |