ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2020.0003
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2020-0003)
Resumen:	The remote host is missing an update for the 'putty' package(s) announced via the MGASA-2020-0003 advisory.
Descripción:	Summary: The remote host is missing an update for the 'putty' package(s) announced via the MGASA-2020-0003 advisory. Vulnerability Insight: Updated putty package fixes security vulnerabilities: Two separate vulnerabilities affecting the obsolete SSH-1 protocol, both available before host key checking. Vulnerability in all the SSH client tools (PuTTY, Plink, PSFTP, and PSCP) if a malicious program can impersonate Pageant. Crash in GSSAPI / Kerberos key exchange triggered if the server provided an ordinary SSH host key as part of the exchange. Insufficient handling of terminal escape sequences, that should delimit the pasted data in bracketed paste mode (CVE-2019-17068). Possible information leak caused by SSH-1 disconnection messages (CVE-2019-17069). The putty package has been updated to version 0.73, fixing these issues and other bugs. Affected Software/OS: 'putty' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2019-17068 https://lists.tartarus.org/pipermail/putty-announce/2019/000029.html SuSE Security Announcement: openSUSE-SU-2019:2276 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00021.html SuSE Security Announcement: openSUSE-SU-2019:2277 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00020.html SuSE Security Announcement: openSUSE-SU-2019:2292 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00030.html Common Vulnerability Exposure (CVE) ID: CVE-2019-17069 https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.