NVD

Id
40372  
Name
CVE-2013-4852  
Description
Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in certain applications that use PuTTY via a negative size value in an RSA key signature during the SSH handshake, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-08-19  
Modified Date
2015-09-02  
Seq
2013-4852  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204991 40372 CVE-2013-4852 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=718779  View
204992 40372 CVE-2013-4852 openSUSE-SU-2013:1347  View
204993 40372 CVE-2013-4852 openSUSE-SU-2013:1355  View
204994 40372 CVE-2013-4852 http://svn.tartarus.org/sgt?view=revision&sortby=date&revision=9896  View
204995 40372 CVE-2013-4852 http://winscp.net/tracker/show_bug.cgi?id=1017  View
204996 40372 CVE-2013-4852 http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-signature-stringlen.html  View
204997 40372 CVE-2013-4852 DSA-2736  View
204998 40372 CVE-2013-4852 http://www.search-lab.hu/advisories/secadv-20130722  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22226 JVNDB-2013-003801 PuTTY および WinSCP などの製品における整数オーバーフローの脆弱性 PuTTY、WinSCP および PuTTY を使用するその他の製品には、整数オーバーフローの脆弱性が存在します。 CVE-2013-4852 64794 CVE-2013-4852 40372 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003801.html 2013-07-09 2013-08-21 View