Package putty updated to version 0.76-alt1 for branch sisyphus in task 279604.

Published: 2021-06-19

BDU:2021-04545

Уязвимость реализации протокола SSH средства криптографической защиты PuTTY, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Severity: HIGH (8.1) Vector: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

References:

CVE-2021-36367

Published: 2021-07-10
Modified: 2024-11-21

CVE-2021-36367

PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication response. This makes it easier for an attacker-controlled SSH server to present a later spoofed authentication prompt (that the attacker can use to capture credential data, and use that data for purposes that are undesired by the client user).

Severity: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

References:

Version: 2.1.0

Package putty update in sisyphus on 2021-07-18

ALT-PU-2021-2266-1

Closed vulnerabilities

BDU:2021-04545

CVE-2021-36367