Re: [IPS] PUTTY SSH-Client Exploit

From: Owen Dunn (owendat_private)
Date: Sat Jan 04 2003 - 15:22:55 PST

  • Next message: Frog Man: "OpenTopic security hole" 

    Daniel Alcántara de la Hoz <seguridadat_private> writes:

> In December 16, 2002 Rapid 7.Inc released a security alert about
> vulnerabilities in ssh2 implementations from multiple vendors. We
> have used the concept to code this exploit/proof of concept.
>  
> It's a fake server to exploit the putty client. To test it you need
> to change the url in the shellcode; that file will be downloaded and
> run on exploitation.

I should point out that the vulnerabilities uncovered by Rapid 7 were
fixed in PuTTY 0.53b, released on November 12th 2002.

(S) (PuTTY team member)

    This archive was generated by hypermail 2b30 : Sat Jan 04 2003 - 18:35:33 PST