Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | PuTTY SSH client vulnerability |
|---|---|
| Date: | Tue, 26 Oct 2004 23:02:22 -0400 |
From http://www.chiark.greenend.org.uk/~sgtatham/putty/
====================================================================== 2004-10-26 ANOTHER SECURITY HOLE, fixed in PuTTY 0.56 PuTTY 0.56, released today, fixes a serious security hole which can allow a server to execute code of its choice on a PuTTY client connecting to it. In SSH2, the attack can be performed before host key verification, meaning that even if you trust the server you think you are connecting to, a different machine could be impersonating it and could launch the attack before you could tell the difference. We recommend everybody upgrade to 0.56 as soon as possible. That's two really bad holes in three months. I'd like to apologise to all our users for the inconvenience. ======================================================================
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Crashs in Master of Orion III 1.2.5, Luigi Auriemma |
|---|---|
| Next by Date: | Re: Update: Web browsers - a mini-farce (MSIE gives in), Valdis . Kletnieks |
| Previous by Thread: | Crashs in Master of Orion III 1.2.5, Luigi Auriemma |
| Next by Thread: | [CLA-2004:879] Conectiva Security Announcement - kernel, Conectiva Updates |
| Indexes: | [Date] [Thread] [Top] [All Lists] |