SSH Communications Secure Shell Windows Client URL Catcher Buffer Overflow Vulnerability
BID:6263
Info
SSH Communications Secure Shell Windows Client URL Catcher Buffer Overflow Vulnerability
| Bugtraq ID: | 6263 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 27 2002 12:00AM |
| Updated: | Nov 27 2002 12:00AM |
| Credit: | Vulnerability announced by SSH Communications Security. |
| Vulnerable: |
SSH Communications Security SSH2 3.2 SSH Communications Security SSH2 3.1.4 SSH Communications Security SSH2 3.1.3 SSH Communications Security SSH2 3.1.2 SSH Communications Security SSH2 3.1.1 SSH Communications Security SSH2 3.1 |
| Not Vulnerable: |
SSH Communications Security SSH2 3.2.2 SSH Communications Security SSH2 3.1.5 |
Discussion
SSH Communications Secure Shell Windows Client URL Catcher Buffer Overflow Vulnerability
A buffer overflow vulnerability has been reported for the Secure Shell Windows client. The vulnerability is due to an error in the URL handling of the Secure Shell client. Reportedly, it is possible for a buffer overflow condition to be triggered when a user clicks on a very long URL.
An attacker can exploit this vulnerability by crafting a malicious link and enticing a victim user to click it. This will result in the buffer overflow condition being triggered and causing sensitive areas in memory being overwritten with attacker-supplied values. Any malicious attacker-supplied code embedded in the URL will be executed on the victim system.
A buffer overflow vulnerability has been reported for the Secure Shell Windows client. The vulnerability is due to an error in the URL handling of the Secure Shell client. Reportedly, it is possible for a buffer overflow condition to be triggered when a user clicks on a very long URL.
An attacker can exploit this vulnerability by crafting a malicious link and enticing a victim user to click it. This will result in the buffer overflow condition being triggered and causing sensitive areas in memory being overwritten with attacker-supplied values. Any malicious attacker-supplied code embedded in the URL will be executed on the victim system.
Exploit / POC
SSH Communications Secure Shell Windows Client URL Catcher Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
SSH Communications Secure Shell Windows Client URL Catcher Buffer Overflow Vulnerability
References:
References:
- SSH Secure Shell 3.1 to 3.2.0 Windows client URL catcher buffer overflow vulnera (SSH Communications Security)