PuTTY DSA Signature CVE-2013-4207 Remote Buffer Overflow Vulnerability

Bugtraq ID:	61649
Class:	Input Validation Error
CVE:	CVE-2013-4207
Remote:	Yes
Local:	No
Published:	Aug 05 2013 12:00AM
Updated:	May 07 2015 05:10PM
Credit:	The vendor reported this issue.
Vulnerable:	TortoiseGit TortoiseGit 1.8.4.0 Simon Tatham PuTTY 0.58 Simon Tatham PuTTY 0.57 Simon Tatham PuTTY 0.56 Simon Tatham PuTTY 0.55 Simon Tatham PuTTY 0.54 Simon Tatham PuTTY 0.53 Simon Tatham PuTTY 0.52 Simon Tatham PuTTY 0.62 Simon Tatham PuTTY 0.61 Simon Tatham PuTTY 0.60 Simon Tatham PuTTY 0.59 S.u.S.E. openSUSE 12.3 S.u.S.E. openSUSE 12.2 Gentoo Linux FileZilla FileZilla 3.7.2 FileZilla FileZilla 3.0.10 -rc2 FileZilla FileZilla 3.0.10 -rc1 FileZilla FileZilla 3.0.10 FileZilla FileZilla 3.0.9 FileZilla FileZilla 3.0 -beta5 FileZilla FileZilla 3.0 -beta4 FileZilla FileZilla 3.0 -beta3 FileZilla FileZilla 3.0 -beta2 FileZilla FileZilla 3.0 -beta1 FileZilla FileZilla 2.2.32 FileZilla FileZilla 2.2.31 FileZilla FileZilla 2.2.30 FileZilla FileZilla 2.2.29 FileZilla FileZilla 2.2.28 FileZilla FileZilla 2.2.27 FileZilla FileZilla 2.2.26 FileZilla FileZilla 2.2.25 FileZilla FileZilla 2.2.24 FileZilla FileZilla 2.2.23 FileZilla FileZilla 2.2.22 FileZilla FileZilla 2.2.15 FileZilla FileZilla 0.9.22 FileZilla FileZilla 0.9.21 FileZilla FileZilla 0.9.20 FileZilla FileZilla 3.7.1.1 FileZilla FileZilla 2.2.30a FileZilla FileZilla 2.2.26a Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	TortoiseGit TortoiseGit 1.8.5.0 Simon Tatham PuTTY 0.63 FileZilla FileZilla 3.7.3

PuTTY DSA Signature CVE-2013-4207 Remote Buffer Overflow Vulnerability

PuTTY is prone to a remote buffer-overflow vulnerability.

Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

PuTTY versions 0.52 through 0.62 are vulnerable.

PuTTY DSA Signature CVE-2013-4207 Remote Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

PuTTY DSA Signature CVE-2013-4207 Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

PuTTY DSA Signature CVE-2013-4207 Remote Buffer Overflow Vulnerability

References:

• FileZilla HomePage (FileZilla)
  
• PuTTY Homepage (PuTTY Project)
  
• PuTTY Revision 9996 (Simon Tatham)
  
• PuTTY vulnerability vuln-bignum-division-by-zero (Simon Tatham)
  
• TortoiseGit Release 1.8.5.0 (TortoiseGit)
  
• FileZilla: Multiple vulnerabilities (Gentoo Foundation)