CVE-2018-20684

Mô tả

Tham khảo

• securityfocus.com/bid/106526 · Third Party Advisory
• winscp/winscp commit 49d876f · Patch
• sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt · Mitigation
• winscp.net/eng/docs/history · Release Notes
• winscp.net/tracker/1675 · Patch
• oracle.com/security-alerts/cpujan2020.html

Lỗ hổng khác của winscp

• CVE-2024-31497TRUNG BÌNH 5.9In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a qui…
• CVE-2023-48795TRUNG BÌNH 5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas…
• CVE-2021-3331NGHIÊM TRỌNG 9.8WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler encounters a crafted URL that loads session…
• CVE-2020-28864NGHIÊM TRỌNG 9.8Buffer overflow in WinSCP 5.17.8 allows a malicious FTP server to cause a denial of service or possibly have other unspecified impact via a …
• CVE-2019-6111TRUNG BÌNH 5.9An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directorie…