CVE

Id
11673  
CVE No.
CVE-2005-0467  
Status
Candidate  
Description
Multiple integer overflows in the (1) sftp_pkt_getstring and (2) fxp_readdir_recv functions in the PSFTP and PSCP clients for PuTTY 0.56, and possibly earlier versions, allow remote malicious web sites to execute arbitrary code via SFTP responses that corrupt the heap after insufficient memory has been allocated.  
Phase
Assigned (20050218)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
83491 11673 CVE-2005-0467 IDEFENSE:20050221 Multiple PuTTY SFTP Client Packet Parsing Integer Overflow Vulnerabilities  View
83492 11673 CVE-2005-0467 URL:http://www.idefense.com/application/poi/display?id=201&type=vulnerabilities  View
83493 11673 CVE-2005-0467 CONFIRM:http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-string.html  View
83494 11673 CVE-2005-0467 CONFIRM:http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-readdir.html  View
83495 11673 CVE-2005-0467 CONFIRM:http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002414  View
83496 11673 CVE-2005-0467 CONFIRM:http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002416  View
83497 11673 CVE-2005-0467 GENTOO:GLSA-200502-28  View
83498 11673 CVE-2005-0467 URL:http://www.gentoo.org/security/en/glsa/glsa-200502-28.xml  View
83499 11673 CVE-2005-0467 SECUNIA:14333  View
83500 11673 CVE-2005-0467 URL:http://secunia.com/advisories/14333  View
83501 11673 CVE-2005-0467 SECUNIA:17214  View
83502 11673 CVE-2005-0467 URL:http://secunia.com/advisories/17214  View
83503 11673 CVE-2005-0467 XF:putty-sftppktgetstring-bo(19403)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62001 JVNDB-2005-000203 Telnet クライアントの slc_add_reply 関数によるバッファオーバーフローの脆弱性 多くの製品に同梱されている telnet クライアントには、slc_add_reply() 関数で LINEMODE サブオプションの処理で応答データの境界チェックが適切に行われないために、過大に多くの SLC (Set Local Character) コマンドを含むサーバからの応答を受信した場合に、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2005-0469 11673 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000203.html  View