p PatchFirst

CVE-2005-0467

CVE-2005-0467

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Multiple integer overflows in the (1) sftp_pkt_getstring and (2) fxp_readdir_recv functions in the PSFTP and PSCP clients for PuTTY 0.56, and possibly earlier versions, allow remote malicious web sites to execute arbitrary code via SFTP responses that corrupt the heap after insufficient memory has been allocated.

EPSS 3.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • putty Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.57-1

    Update to 0.57-1

  • putty Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.57-1

    Update to 0.57-1

  • putty Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.57-1

    Update to 0.57-1

Original sources

Check your server →