SCP implementations impacted by 36-years-old security flaws

guest · Jan 14, 2019

SCP implementations impacted by 36-years-old security flaws
OpenSSH, Putty, and WinSCP are all impacted. Patches available for WinSCP
January 14, 2019
https://www.zdnet.com/article/scp-implementations-impacted-by-36-years-old-security-flaws/

All SCP (Secure Copy Protocol) implementations from the last 36 years, since 1983, are vulnerable to four security bugs that allow a malicious SCP server to make unauthorized changes to a client's (user's) system and hide malicious operations in the terminal.

Users who believe they might be impacted can keep an eye on Sirtonen's security advisory for updated information for upcoming patches to other SCP clients, after this article's publication date. We'll do our best to keep this article up to date.
Click to expand...

Vulnerabilities

CVE-2018-20685 - An SCP client app allows a remote SCP server to modify permissions of the target directory.

CVE-2019-6111 - A malicious SCP server can overwrite arbitrary files in the SCP client target directory. If a recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example overwrite .ssh/authorized_keys).

CVE-2019-6109 - The terminal client output can be manipulated via ANSI code to hide subsequent operations.

CVE-2019-6110 - Similar as above.

Click to expand...

Vulnerable versions

The following software packages have some or all vulnerabilities:

OpenSSH scp [Version: <=7.9], Vulnerability #1 #2 #3 #4
PuTTY PSCP [Version: ?], Vulnerability #3 #4
WinSCP scp mode [Version: <=5.13], Vulnerability #2

Tectia SSH scpg3 is not affected since it exclusively uses sftp protocol
Click to expand...

mirimir · Jan 15, 2019

I only use SCP between my own systems. Even before seeing this, I'm not sure that I'd have felt comfortable accessing others' SCP servers.

Log in or Sign up

SCP implementations impacted by 36-years-old security flaws

guest Guest

mirimir Registered Member

Log in or Sign up

SCP implementations impacted by 36-years-old security flaws

guest Guest

mirimir Registered Member

Useful Searches