CVE-2005-0467

CVE-2005-0467 affects PuTTY PSFTP/PSCP clients (up to and including 0.56; possibly earlier) via two heap-corruption vulnerabilities: improper handling in sftp_pkt_getstring and fxp_readdir_recv that can enable remote code execution when interacting with a malicious SFTP server. A patch/mitigation...

CVE-2005-0467

Multiple integer overflows in the 1 sftppktgetstring and 2 fxpreaddirrecv functions in the PSFTP and PSCP clients for PuTTY 0.56, and possibly earlier versions, allow remote malicious web sites to execute arbitrary code via SFTP responses that corrupt the heap after insufficient memory has been...