Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

putty putty 0.48 vulnerabilities and exploits

(subscribe to this query)
4.6
CVSSv2
CVE-2003-0048
PuTTY 0.53b and previous versions does not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.
Putty Putty 0.53bPutty Putty 0.49Putty Putty 0.53Putty Putty 0.48
7.5
CVSSv2
CVE-2004-1440
Multiple heap-based buffer overflows in the modpow function in PuTTY prior to 0.55 allow (1) remote malicious users to execute arbitrary code via an SSH2 packet with a base argument that is larger than the mod argument, which causes the modpow function to write memory before the ...
Putty Putty 0.53Putty Putty 0.53bPutty Putty 0.49Putty Putty 0.50Putty Putty 0.51Putty Putty 0.52Putty Putty 0.48Putty Putty 0.54
10
CVSSv2
CVE-2004-1008
Integer signedness error in the ssh2_rdpkt function in PuTTY prior to 0.56 allows remote malicious users to execute arbitrary code via a SSH2_MSG_DEBUG packet with a modified stringlen parameter, which leads to a buffer overflow.
Putty Putty 0.49Putty Putty 0.50Putty Putty 0.51Putty Putty 0.53bPutty Putty 0.54Putty Putty 0.52Putty Putty 0.53Putty Putty 0.48Putty Putty 0.55Tortoisecvs Tortoisecvs 1.8
2.1
CVSSv2
CVE-2013-4208
The rsa_verify function in PuTTY prior to 0.63 (1) does not clear sensitive process memory after use and (2) does not free certain structures containing sensitive process memory, which might allow local users to discover private RSA and DSA keys.
Putty Putty 0.54Putty Putty 0.53bSimon Tatham Putty 0.53Putty Putty 0.52Putty Putty 0.61Simon Tatham PuttyPutty Putty 0.60Putty Putty 0.59Putty Putty 0.47Putty Putty 0.46Putty Putty 0.45Putty Putty 0.57Putty Putty 0.55Putty Putty 0.51Putty Putty 0.49Putty Putty 0.58Putty Putty 0.56Putty Putty 0.50Putty Putty 0.48
6.8
CVSSv2
CVE-2013-4206
Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY prior to 0.63 allows remote SSH servers to cause a denial of service (crash) and possibly trigger memory corruption or code execution via a crafted DSA signature, which is not properly handled when performing ...
Simon Tatham Putty 0.53Putty Putty 0.52Putty Putty 0.51Putty Putty 0.50Putty Putty 0.61Putty Putty 0.60Putty Putty 0.59Putty Putty 0.58Putty Putty 0.57Putty Putty 0.45Putty Putty 2010-06-01Simon Tatham PuttyPutty Putty 0.55Putty Putty 0.53bPutty Putty 0.49Putty Putty 0.47Putty Putty 0.56Putty Putty 0.54Putty Putty 0.48Putty Putty 0.46
4.3
CVSSv2
CVE-2013-4207
Buffer overflow in sshbn.c in PuTTY prior to 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properly handled during computation of a modular inverse and triggers the overflow during a division by zero by the bignum fun...
Putty Putty 0.57Putty Putty 0.56Putty Putty 0.55Putty Putty 0.54Putty Putty 0.53bSimon Tatham PuttyPutty Putty 0.49Putty Putty 0.48Putty Putty 0.47Putty Putty 0.46Putty Putty 0.60Putty Putty 0.58Putty Putty 0.52Putty Putty 0.50Putty Putty 0.45Putty Putty 0.61Putty Putty 0.59Simon Tatham Putty 0.53Putty Putty 0.51Putty Putty 2010-06-01
5
CVSSv2
CVE-2000-0476
xterm, Eterm, and rxvt allow an malicious user to cause a denial of service by embedding certain escape characters which force the window to be resized.
Putty Putty 0.48Xfree86 Project X11r6 3.3.3Xfree86 Project X11r6 4.0Michael Jennings Eterm 0.8.10Rxvt Rxvt 2.6.1
6.8
CVSSv2
CVE-2013-4852
Integer overflow in PuTTY 0.62 and previous versions, WinSCP prior to 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in certain applications that use PuTTY via a negative size value in an...
Winscp Winscp 5.1.4Winscp Winscp 5.1.3Winscp Winscp 5.1.2Winscp Winscp 5.1.1Winscp Winscp 4.3.8Winscp Winscp 4.3.7Winscp Winscp 4.3.6Winscp Winscp 3.7.6Winscp Winscp 5.0.6Winscp Winscp 5.0.5Winscp Winscp 5.0.4Winscp Winscp 5.0.3Winscp Winscp 5.0.2Winscp Winscp 4.2.6Winscp Winscp 4.2.7Winscp Winscp 4.2.8Winscp Winscp 4.2.9Winscp Winscp 5.0.9Winscp Winscp 5.0.7Winscp Winscp 5.0Winscp Winscp 4.3.9Winscp Winscp 3.8.2
10
CVSSv2
CVE-2002-1357
Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote malicious users to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
Cisco Ios 12.1eaCisco Ios 12.1tCisco Ios 12.2tCisco Ios 12.2Cisco Ios 12.2sCisco Ios 12.0sCisco Ios 12.0stCisco Ios 12.1eNetcomposite Shellguard Ssh 3.4.6Pragma Systems Secureshell 2.0Putty Putty 0.53Winscp Winscp 2.0.0Putty Putty 0.48Putty Putty 0.49Fissh Ssh Client 1.0a For WindowsIntersoft Securenetterm 5.4.1
10
CVSSv2
CVE-2002-1358
Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote malicious users to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
Cisco Ios 12.0sCisco Ios 12.0stCisco Ios 12.1tCisco Ios 12.2Cisco Ios 12.2sCisco Ios 12.1eCisco Ios 12.1eaCisco Ios 12.2tFissh Ssh Client 1.0a For WindowsIntersoft Securenetterm 5.4.1Putty Putty 0.48Putty Putty 0.49Netcomposite Shellguard Ssh 3.4.6Pragma Systems Secureshell 2.0Putty Putty 0.53Winscp Winscp 2.0.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook