DEBIAN-CVE-2004-1440

Multiple heap-based buffer overflows in the modpow function in PuTTY before 0.55 allow 1 remote attackers to execute arbitrary code via an SSH2 packet with a base argument that is larger than the mod argument, which causes the modpow function to write memory before the beginning of its buffer, an...

CVE-2004-1008

Integer signedness error in the ssh2rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2MSGDEBUG packet with a modified stringlen parameter, which leads to a buffer overflow...

CVE-2004-1008

Integer signedness error in the ssh2rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2MSGDEBUG packet with a modified stringlen parameter, which leads to a buffer overflow...

CVE-2004-1008

CVE-2004-1008 affects PuTTY prior to 0.56. An integer signedness error in the ssh2_rdpkt function allows an attacker to trigger a buffer overflow via a crafted SSH2_MSG_DEBUG packet (modified stringlen). This enables remote code execution. Remediation: upgrade PuTTY to 0.56 or newer (patched vers...

FreeBSD : putty -- buffer overflow vulnerability in ssh2 support (159)

The following package needs to be updated: putty %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg19518d222d0511d989430050fc56d258.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...

PuTTY SSH2 buffer overflow

Buffer overflow on SSH2MSGDEBUG packet processing...

iDEFENSE Security Advisory 10.27.04 - PuTTY SSH2_MSG_DEBUG Buffer Overflow Vulnerability

PuTTY SSH2MSGDEBUG Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.27.04 www.idefense.com/application/poi/display?id=155&type=vulnerabilities October 27, 2004 I. BACKGROUND PuTTY is a free implementation of Telnet and SSH for Win32 and Unix platforms, along with an xterm terminal...

PuTTY < 0.56 Remote SSH2_MSG_DEBUG Buffer Overflow

Binary data 2371.prm...

GLSA-200410-29 : PuTTY: Pre-authentication buffer overflow

The remote host is affected by the vulnerability described in GLSA-200410-29 PuTTY: Pre-authentication buffer overflow PuTTY fails to do proper bounds checking on SSH2MSGDEBUG packets. The 'stringlen' parameter value is incorrectly checked due to signedness issues. Note that this vulnerability is...

PuTTY: Pre-authentication buffer overflow

Background PuTTY is a free implementation of Telnet and SSH for Win32 and Unix platforms, along with an xterm terminal emulator. Description PuTTY fails to do proper bounds checking on SSH2MSGDEBUG packets. The "stringlen" parameter value is incorrectly checked due to signedness issues. Note that...

CVE-2003-0069

CVE-2023-30844 affects Mutagen real-time file sync/forwarding. Before v0.16.6 and v0.17.1 (and v0.17.1 in mutagen-compose), Mutagen’s list and monitor commands do not neutralize control characters from remote endpoints, risking terminal corruption if these characters appear in error messages or p...

CVE-2003-0069

The PuTTY terminal emulator 0.53 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute...

CVE-2003-0069

The PuTTY terminal emulator 0.53 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute...

GLSA-200408-04 : PuTTY: Pre-authentication arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-200408-04 PuTTY: Pre-authentication arbitrary code execution PuTTY contains a vulnerability allowing a malicious server to execute arbitrary code on the connecting client before host key verification. Impact : When connecting to a...

Putty < 0.54 SSH2 Authentication Password Persistence Weakness

Binary data 1999.prm...

PuTTY < 0.55 modpow Function Arbitrary Code Execution

Binary data 1998.prm...

PuTTY: Pre-authentication arbitrary code execution

Background PuTTY is a free implementation of Telnet and SSH for Win32 and Unix platforms, along with an xterm terminal emulator. Description PuTTY contains a vulnerability allowing a malicious server to execute arbitrary code on the connecting client before host key verification. Impact When...

CORE-2004-0705: Vulnerabilities in PuTTY and PSCP

Core Security Technologies Advisory http://www.coresecurity.com Vulnerabilities in PuTTY and PSCP Date Published: 2004-08-04 Last Update: 2004-08-04 Advisory ID: CORE-2004-0705 Bugtraq ID: None currently assigned. CVE Name: None currently assigned. Title: Vulnerabilities in PuTTY and PSCP Class:...

PUTTY/PSCP buffer overflows

Few buffer overflows...

CVE-2003-0069

The PuTTY terminal emulator 0.53 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute...