Lucene search
K

Putty Beta 0.67 DLL Hijacking

🗓️ 01 Jul 2016 00:00:00Reported by Sachin WaghType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 49 Views

Putty Beta 0.67 DLL Hijacking vulnerability expose

Related
Code
ReporterTitlePublishedViews
Family
CNVD
PuTTY Elevation of Privilege Vulnerability
8 Jul 201600:00
cnvd
CVE
CVE-2016-6167
30 Jan 201722:00
cve
Cvelist
CVE-2016-6167
30 Jan 201722:00
cvelist
Debian CVE
CVE-2016-6167
30 Jan 201722:00
debiancve
EUVD
EUVD-2016-7101
7 Oct 202500:30
euvd
NVD
CVE-2016-6167
30 Jan 201722:59
nvd
OpenVAS
PuTTY DLL Hijacking Vulnerability - Windows
9 Feb 201700:00
openvas
OSV
CVE-2016-6167
30 Jan 201722:59
osv
Prion
Design/Logic Flaw
30 Jan 201722:59
prion
SUSE CVE
SUSE CVE-2016-6167
15 Feb 202304:59
susecve
Rows per page
`/*  
Exploit Title: Putty DLL Hijacking Exploit ( UxTheme.dll or ntmarta.dll )  
Vendor Homepage:https://the.earth.li/~sgtatham/putty/latest/x86/putty.exe  
Author: Sachin Wagh (@tiger_tigerboy)  
Linkedin: https://in.linkedin.com/in/sachin-wagh-95b17555  
Affected Version: beta 0.67  
Tested on: Windows 7 Ultimate  
*/  
  
Proof-Of-Concept :  
  
1. Create malicious dll file and save it as UxTheme.dll or ntmarta.dll in  
your "Downloads" directory.  
  
2. Download https://the.earth.li/~sgtatham/putty/latest/x86/putty.exe and  
save it in your "Downloads"  
directory.  
  
3. Execute putty.exe from your "Downloads" directory.  
  
4. Malicious dll file gets executed.  
  
  
Credit,  
  
*Sachin Wagh*  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

01 Jul 2016 00:00Current
0.2Low risk
Vulners AI Score0.2
EPSS0.00119
49