| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| ssh client | = 1.0a_for_windows | |
| securenetterm | = 5.4.1 | |
| shellguard ssh | = 3.4.6 | |
| secureshell | = 2.0 | |
| putty | = 0.48= 0.49= 0.53 | |
| winscp | = 2.0.0 |
Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminated strings as implemented using languages such as C, as demonstrated by the SSHredder SSH protocol test suite.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン