ANSWERED Putty vulnerability?

[serge1966 0]

My antivirus software shows potential vulnerability with plink.exe, located in C:\Program Files\AirVPN, which it identifies as putty suite by Simon Tatham, version 0.73. There was a fix for Terrapin attack, which seems to be released with putty version 0.80. Should users do something about it? AirVPN v.2.21.8

[OpenSourcerer 1441]

Quote

Anyway, remember that the OpenVPN client, at a first analysis, can't be fooled by this method: if you have connected via SSH, by running a vulnerable SSH client and library, to some entity in the middle which pretends to be us by exploiting the vulnerability, that entity will fail to mimic an OpenVPN connection to one of our servers, because it lacks the proper certificates and keys. On the client side you will be able to establish an SSH connection to the attacker machine (provided that you run a vulnerable ssh), but then OpenVPN will fail to connect.

.