|
|
CVE Reference: CVE-2005-0467 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2005-0467 |
|
|
Description: Multiple integer overflows in the (1) sftp_pkt_getstring and (2) fxp_readdir_recv functions in the PSFTP and PSCP clients for PuTTY 0.56, and possibly earlier versions, allow remote malicious web sites to execute arbitrary code via SFTP responses that corrupt the heap after insufficient memory has been allocated. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/19403 SAID Secunia Advisory: SA14333 Secunia Advisory: SA17214 IDEFENSE http://www.idefense.com/application/poi/display?id=201&type=vulnerabilities GENTOO http://www.gentoo.org/security/en/glsa/glsa-200502-28.xml CONFIRM http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-readdir.html http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002414 http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002416 http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-string.html |
|
| Return to the previous page. |
