The rsa_verify function in PuTTY prior to 0.63 (1) does not clear sensitive process memory after use and (2) does not free certain structures containing sensitive process memory, which might allow local users to discover private RSA and DSA keys.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
putty putty 0.54 |
||
putty putty 0.53b |
||
simon tatham putty 0.53 |
||
putty putty 0.52 |
||
putty putty 0.61 |
||
simon tatham putty |
||
putty putty 0.60 |
||
putty putty 0.59 |
||
putty putty 0.47 |
||
putty putty 0.46 |
||
putty putty 0.45 |
||
putty putty 0.57 |
||
putty putty 0.55 |
||
putty putty 0.51 |
||
putty putty 0.49 |
||
putty putty 0.58 |
||
putty putty 0.56 |
||
putty putty 0.50 |
||
putty putty 0.48 |