| Package | Affected versions | Patched versions |
|---|---|---|
| ssh client | = 1.0a_for_windows | |
| securenetterm | = 5.4.1 | |
| shellguard ssh | = 3.4.6 | |
| secureshell | = 2.0 | |
| putty | = 0.48= 0.49= 0.53 | |
| winscp | = 2.0.0 |
Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free