Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2013-4208
Description:The rsa_verify function in PuTTY before 0.63 (1) does not clear sensitive process memory after use and (2) does not free certain structures containing sensitive process memory, which might allow local users to discover private RSA and DSA keys.
Test IDs: 1.3.6.1.4.1.25623.1.0.892736   1.3.6.1.4.1.25623.1.0.702736  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2013-4208
Debian Security Information: DSA-2736 (Google Search)
http://www.debian.org/security/2013/dsa-2736
http://www.openwall.com/lists/oss-security/2013/08/06/11
http://secunia.com/advisories/54379
http://secunia.com/advisories/54533
SuSE Security Announcement: openSUSE-SU-2013:1347 (Google Search)
http://lists.opensuse.org/opensuse-updates/2013-08/msg00035.html




© 1998-2024 E-Soft Inc. All rights reserved.