CVE Vulnerabilities

CVE-2004-1440

Published: Dec 31, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Multiple heap-based buffer overflows in the modpow function in PuTTY before 0.55 allow (1) remote attackers to execute arbitrary code via an SSH2 packet with a base argument that is larger than the mod argument, which causes the modpow function to write memory before the beginning of its buffer, and (2) remote malicious servers to cause a denial of service (client crash) and possibly execute arbitrary code via a large bignum during authentication.

Affected Software

Name Vendor Start Version End Version
Putty Putty 0.48 0.48
Putty Putty 0.49 0.49
Putty Putty 0.50 0.50
Putty Putty 0.51 0.51
Putty Putty 0.52 0.52
Putty Putty 0.53 0.53
Putty Putty 0.53b 0.53b
Putty Putty 0.54 0.54

References