Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-4208
HistoryAug 19, 2013 - 12:00 a.m.

CVE-2013-4208

2013-08-1900:00:00
ubuntu.com
ubuntu.com
11

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.1%

The rsa_verify function in PuTTY before 0.63 (1) does not clear sensitive
process memory after use and (2) does not free certain structures
containing sensitive process memory, which might allow local users to
discover private RSA and DSA keys.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchputty<Β 0.62-6ubuntu0.1UNKNOWN
ubuntu12.10noarchputty<Β 0.62-9ubuntu0.1UNKNOWN
ubuntu13.04noarchputty<Β 0.62-10ubuntu0.1UNKNOWN

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.1%