PSCP Modpow Base Integer Handling Buffer Overrun Vulnerability

Bugtraq ID:	10870
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 04 2004 12:00AM
Updated:	Aug 04 2004 12:00AM
Credit:	Discovery of this issue is credited to Core Security Technologies.
Vulnerable:	Simon Tatham PSCP 0.54
Not Vulnerable:	Simon Tatham PSCP 0.55

PSCP Modpow Base Integer Handling Buffer Overrun Vulnerability

PSCP is reported prone to a buffer overrun vulnerability.

An attacker might leverage this issue to execute arbitrary code on an affected system. As this issue is exploitable before any authorization and before the host key is verified, any remote attacker can exploit this to gain unauthorized access to a vulnerable computer with the privileges of the user that started the affected application.

PSCP Modpow Base Integer Handling Buffer Overrun Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

PSCP Modpow Base Integer Handling Buffer Overrun Vulnerability

Solution:
The vendor has provided an upgrade dealing with this issue.


Simon Tatham PSCP 0.54

• Simon Tatham PuTTY 0,55/PSCP 0,55
  http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html

PSCP Modpow Base Integer Handling Buffer Overrun Vulnerability

References:

• PuTTY Changelogs (PuTTY Project)
  
• PuTTY Homepage (PuTTY Project)