CVE Vulnerabilities

CVE-2004-1008

Published: Jan 10, 2005 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Integer signedness error in the ssh2_rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2_MSG_DEBUG packet with a modified stringlen parameter, which leads to a buffer overflow.

Affected Software

Name Vendor Start Version End Version
Putty Putty 0.48 0.48
Putty Putty 0.49 0.49
Putty Putty 0.50 0.50
Putty Putty 0.51 0.51
Putty Putty 0.52 0.52
Putty Putty 0.53 0.53
Putty Putty 0.53b 0.53b
Putty Putty 0.54 0.54
Putty Putty 0.55 0.55
Tortoisecvs Tortoisecvs 1.8 1.8

References