Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2020.0003
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2020-0003)
Zusammenfassung:	The remote host is missing an update for the 'putty' package(s) announced via the MGASA-2020-0003 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'putty' package(s) announced via the MGASA-2020-0003 advisory. Vulnerability Insight: Updated putty package fixes security vulnerabilities: Two separate vulnerabilities affecting the obsolete SSH-1 protocol, both available before host key checking. Vulnerability in all the SSH client tools (PuTTY, Plink, PSFTP, and PSCP) if a malicious program can impersonate Pageant. Crash in GSSAPI / Kerberos key exchange triggered if the server provided an ordinary SSH host key as part of the exchange. Insufficient handling of terminal escape sequences, that should delimit the pasted data in bracketed paste mode (CVE-2019-17068). Possible information leak caused by SSH-1 disconnection messages (CVE-2019-17069). The putty package has been updated to version 0.73, fixing these issues and other bugs. Affected Software/OS: 'putty' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-17068 https://lists.tartarus.org/pipermail/putty-announce/2019/000029.html SuSE Security Announcement: openSUSE-SU-2019:2276 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00021.html SuSE Security Announcement: openSUSE-SU-2019:2277 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00020.html SuSE Security Announcement: openSUSE-SU-2019:2292 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00030.html Common Vulnerability Exposure (CVE) ID: CVE-2019-17069 https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.