CVE:CVE-2013-4207
CNNVD:CNNVD-201308-111
PuTTY是软件开发者Simon Tatham所研发的一套免费的Telnet、Rlogin和SSH客户端软件。该软件主要用于对Linux系统进行远程管理。
PuTTY 0.62及之前版本中的sshbn.c文件中存在缓冲区溢出漏洞。该漏洞源于程序在模逆运算期间没有正确地处理DSA签名。远程SSH服务器端的攻击者可通过借助无效的DSA签名在大数功能出现除零错误期间触发溢出，造成导致拒绝服务（崩溃）。
solution:Upgrade putty putty to a higher version than 0.45,0.46,0.47,0.48,0.49,0.50,0.51,0.52,0.53b,0.54,0.55,0.56,0.57,0.58,0.59,0.60,0.61,2010-06-01:r8967,and avoid the version 0.45,0.46,0.47,0.48,0.49,0.50,0.51,0.52,0.53b,0.54,0.55,0.56,0.57,0.58,0.59,0.60,0.61,2010-06-01:r8967; Upgrade simon_tatham putty to a higher version than 0.62,0.53,and avoid the version (,0.62],0.53