CVE-2005-0467 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2005-0467
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-0467

Description: Multiple integer overflows in the (1) sftp_pkt_getstring and (2) fxp_readdir_recv functions in the PSFTP and PSCP clients for PuTTY 0.56, and possibly earlier versions, allow remote malicious web sites to execute arbitrary code via SFTP responses that corrupt the heap after insufficient memory has been allocated.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/19403 SAID Secunia Advisory: SA14333 Secunia Advisory: SA17214 IDEFENSE http://www.idefense.com/application/poi/display?id=201&type=vulnerabilities GENTOO http://www.gentoo.org/security/en/glsa/glsa-200502-28.xml CONFIRM http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-readdir.html http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002414 http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002416 http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-string.html

Return to the previous page.