Lucene search

K
cve[email protected]CVE-2006-7162
HistoryMar 07, 2007 - 9:19 p.m.

CVE-2006-7162

2007-03-0721:19:00
NVD-CWE-Other
web.nvd.nist.gov
22
putty
0.59
file permissions
security vulnerability
private keys
session logs
nvd
cve-2006-7162

6.5 Medium

AI Score

Confidence

Low

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

PuTTY 0.59 and earlier uses weak file permissions for (1) ppk files containing private keys generated by puttygen and (2) session logs created by putty, which allows local users to gain sensitive information by reading these files.

CPENameOperatorVersion
putty:puttyputtyle0.59

6.5 Medium

AI Score

Confidence

Low

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

Related for CVE-2006-7162