OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Owen Dunn (owend_at_chiark.greenend.org.uk)
Date: Sat Jan 04 2003 - 17:22:55 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Daniel Alcántara de la Hoz <seguridadiproyectos.net> writes:

    > In December 16, 2002 Rapid 7.Inc released a security alert about
    > vulnerabilities in ssh2 implementations from multiple vendors. We
    > have used the concept to code this exploit/proof of concept.
    >
    > It's a fake server to exploit the putty client. To test it you need
    > to change the url in the shellcode; that file will be downloaded and
    > run on exploitation.

    I should point out that the vulnerabilities uncovered by Rapid 7 were
    fixed in PuTTY 0.53b, released on November 12th 2002.

    (S) (PuTTY team member)