CVE-2011-4607

PuTTY 0.59 through 0.61 does not clear sensitive process memory when
managing user replies that occur during keyboard-interactive
authentication, which might allow local users to read login passwords by
obtaining access to the process’ memory.

Bugs

• <https://bugzilla.redhat.com/show_bug.cgi?id=766865&gt;
• <http://bugs.gentoo.org/show_bug.cgi?id=394429&gt;