Lucene search
HistoryAug 19, 2013 - 11:55 p.m.
CVE-2013-4208
information security
putty
rsa
dsa
vulnerability
memory management
cve-2013-4208
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
5.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The rsa_verify function in PuTTY before 0.63 (1) does not clear sensitive process memory after use and (2) does not free certain structures containing sensitive process memory, which might allow local users to discover private RSA and DSA keys.
Affected configurations
Node
puttyputtyMatch0.45
ORputtyputtyMatch0.46
ORputtyputtyMatch0.47
ORputtyputtyMatch0.48
ORputtyputtyMatch0.49
ORputtyputtyMatch0.50
ORputtyputtyMatch0.51
ORputtyputtyMatch0.52
ORputtyputtyMatch0.53b
ORputtyputtyMatch0.54
ORputtyputtyMatch0.55
ORputtyputtyMatch0.56
ORputtyputtyMatch0.57
ORputtyputtyMatch0.58
ORputtyputtyMatch0.59
ORputtyputtyMatch0.60
ORputtyputtyMatch0.61
ORsimon_tathamputtyRangeβ€0.62
ORsimon_tathamputtyMatch0.53
Related
prion
prion
Use after free
2013-08-19 23:55:00
nvd
nvd
CVE-2013-4208
2013-08-19 23:55:08
seebug
seebug
PuTTY η§ι₯'putty/sshdss.c' ε€δΈͺδΏ‘ζ―ζ³ι²ζΌζ΄
2013-08-11 00:00:00
debiancve
debiancve
CVE-2013-4208
2013-08-19 23:55:08
ubuntucve
ubuntucve
CVE-2013-4208
2013-08-19 00:00:00
cvelist
cvelist
CVE-2013-4208
2013-08-19 23:00:00
nessus
nessus
FileZilla Client < 3.7.3 Multiple Vulnerabilities
2013-08-13 00:00:00
WinSCP < 5.1.7 Multiple Vulnerabilities
2014-02-07 00:00:00
Fedora 18 : filezilla-3.7.3-1.fc18 (2013-14794)
2013-09-30 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201309-08
2015-09-29 00:00:00
Fedora Update for filezilla FEDORA-2013-14794
2013-10-03 00:00:00
PuTTY Multiple Integer Overflow Vulnerabilities - Windows
2013-08-21 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: filezilla-3.7.3-1.fc19
2013-08-18 00:39:40
[SECURITY] Fedora 19 Update: putty-0.63-1.fc19
2013-08-21 00:12:42
[SECURITY] Fedora 18 Update: filezilla-3.7.3-1.fc18
2013-09-30 00:48:24
freebsd
freebsd
PuTTY -- Four security holes in versions before 0.63
2013-07-08 00:00:00
gentoo
gentoo
FileZilla: Multiple vulnerabilities
2013-09-15 00:00:00
kaspersky
kaspersky
KLA10434 Multiple vulnerabilities in PuTTY
2013-08-19 00:00:00
securityvulns
securityvulns
PuTTY / WinSCP security vulnerabilities
2013-08-14 00:00:00
[SECURITY] [DSA 2736-1] putty security update
2013-08-14 00:00:00
mageia
mageia
Updated putty and filezilla packages fixes security vulnerability
2013-08-09 21:38:37
debian
debian
[SECURITY] [DSA 2736-1] putty security update
2013-08-11 19:49:26
[SECURITY] [DSA 2736-1] putty security update
2013-08-11 19:49:26
osv
osv
putty - several
2013-08-11 00:00:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
5.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2013-4208