The host is installed with WinSCP and is prone to integer overflow vulnerability.

Successful exploitation will allow attackers to cause heap-based buffer overflows, resulting in a denial of service or potentially allowing the execution of arbitrary code.

Upgrade to version 5.1.6 or later, For updates refer to http://winscp.net

Flaw is due to improper validation of message lengths in the getstring() function in sshrsa.c and sshdss.c when handling negative SSH handshake.

WinSCP version before 5.1.6 on Windows

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://secunia.com/advisories/54355
• http://winscp.net/eng/docs/history#5.1.6
• http://winscp.net/tracker/show_bug.cgi?id=1017
• http://www.osvdb.com/95970

---

Updated on 2015-03-25