Simon Tatham Vulnerabilidad

Cronología

Escribe

Connectivity Software8
Programming Tool Software2

Producto

Simon Tatham PuTTY8
Simon Tatham NASM2

Contramedidas

Official Fix8
Temporary Fix0
Workaround0
Unavailable0
Not Defined2

Explotabilidad

High0
Functional0
Proof-of-Concept2
Unproven0
Not Defined8

Vector de acceso

Not Defined0
Physical0
Local4
Adjacent2
Network4

Autenticación

Not Defined0
High0
Low0
None10

La interacción del usuario

Not Defined0
Required0
None10

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤50
≤60
≤74
≤84
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤50
≤62
≤76
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤42
≤50
≤60
≤74
≤84
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k2
<2k2
<5k4
<10k0
<25k2
<50k0
<100k0
≥100k0

Explotar hoy

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

Affected Products (2): NASM (1), PuTTY (9)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2015-02-275.95.2Simon Tatham PuTTY DHE escalada de privilegiosConnectivity SoftwareUnprovenUnavailable0.000000.00
2013-08-234.04.0Simon Tatham PuTTY desbordamiento de búferConnectivity SoftwareNot DefinedNot Defined0.000420.00CVE-2011-4607
2013-08-0610.09.5Simon Tatham PuTTY Modular Multiplication modmul desbordamiento de búferConnectivity SoftwareNot DefinedOfficial Fix0.014810.00CVE-2013-4206
2013-08-066.25.9Simon Tatham PuTTY divulgación de informaciónConnectivity SoftwareNot DefinedOfficial Fix0.000420.00CVE-2013-4208
2013-08-067.37.0Simon Tatham PuTTY DSA Signature desbordamiento de búferConnectivity SoftwareNot DefinedOfficial Fix0.008230.00CVE-2013-4207
2013-07-218.67.7Simon Tatham PuTTY SSH Handshake Message Length sshdss.c getstring Remote Code ExecutionConnectivity SoftwareProof-of-ConceptOfficial Fix0.027230.00CVE-2013-4852
2005-05-186.36.3Simon Tatham NASM desbordamiento de búferProgramming Tool SoftwareNot DefinedOfficial Fix0.000710.00CVE-2005-1194
2005-02-217.37.0Simon Tatham PuTTY sftp.c sftp_pkt_getstring desbordamiento de búferConnectivity SoftwareNot DefinedOfficial Fix0.013480.00CVE-2005-0467
2005-02-217.37.0Simon Tatham PuTTY sftp.c fxp_readdir_recv desbordamiento de búferConnectivity SoftwareNot DefinedOfficial Fix0.013480.00CVE-2005-0467
2004-08-047.36.6Simon Tatham PuTTY SSH Connection Attempt desbordamiento de búferConnectivity SoftwareProof-of-ConceptOfficial Fix0.083460.00CVE-2004-1440

◂ AnteriorVisión De ConjuntoPróximo ▸

Might our Artificial Intelligence support you?

Check our Alexa App!