ID de Prueba:	1.3.6.1.4.1.25623.1.0.814661
Categoría:	General
Título:	PuTTY SCP Multiple Spoofing Vulnerabilities - Windows
Resumen:	PuTTY is prone to multiple spoofing vulnerabilities.
Descripción:	Summary: PuTTY is prone to multiple spoofing vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - A missing character encoding in the progress display, the object name can be used to manipulate the client output. - Accepting and displaying arbitrary stderr output from the scp server, a malicious server can manipulate the client output. Vulnerability Impact: Successful exploitation will allow remote servers to spoof the client output. Affected Software/OS: PuTTY version 0.70 and earlier on Windows. Solution: Update to version 0.71 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2019-6109 Debian Security Information: DSA-4387 (Google Search) https://www.debian.org/security/2019/dsa-4387 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W3YVQ2BPTOVDCFDVNC2GGF5P5ISFG37G/ https://security.gentoo.org/glsa/201903-16 https://cvsweb.openbsd.org/src/usr.bin/ssh/progressmeter.c https://cvsweb.openbsd.org/src/usr.bin/ssh/scp.c https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html https://lists.debian.org/debian-lts-announce/2019/03/msg00030.html RedHat Security Advisories: RHSA-2019:3702 https://access.redhat.com/errata/RHSA-2019:3702 SuSE Security Announcement: openSUSE-SU-2019:1602 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00058.html https://usn.ubuntu.com/3885-1/ Common Vulnerability Exposure (CVE) ID: CVE-2019-6110 https://www.exploit-db.com/exploits/46193/
Copyright	Copyright (C) 2019 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.