CVE-2018-20684

概要

参考情報

• securityfocus.com/bid/106526 · Third Party Advisory
• winscp/winscp commit 49d876f · Patch
• sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt · Mitigation
• winscp.net/eng/docs/history · Release Notes
• winscp.net/tracker/1675 · Patch
• oracle.com/security-alerts/cpujan2020.html

winscp のその他の脆弱性

• CVE-2024-31497中 5.9In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a qui…
• CVE-2023-48795中 5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas…
• CVE-2021-3331緊急 9.8WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler encounters a crafted URL that loads session…
• CVE-2020-28864緊急 9.8Buffer overflow in WinSCP 5.17.8 allows a malicious FTP server to cause a denial of service or possibly have other unspecified impact via a …
• CVE-2019-6111中 5.9An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directorie…