CVE-2020-28864

概要

参考情報

• winscp.net/forum/viewtopic.php · Vendor Advisory
• winscp.net/tracker/1924 · Issue Tracking

winscp のその他の脆弱性

• CVE-2024-31497中 5.9In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a qui…
• CVE-2023-48795中 5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas…
• CVE-2021-3331緊急 9.8WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler encounters a crafted URL that loads session…
• CVE-2019-6111中 5.9An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directorie…
• CVE-2019-6110中 6.8In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) …