CVE

Id
9436  
CVE No.
CVE-2004-1008  
Status
Candidate  
Description
Integer signedness error in the ssh2_rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2_MSG_DEBUG packet with a modified stringlen parameter, which leads to a buffer overflow.  
Phase
Assigned (20041103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
63200 9436 CVE-2004-1008 IDEFENSE:20041027 PuTTY SSH2_MSG_DEBUG Buffer Overflow Vulnerability  View
63201 9436 CVE-2004-1008 URL:http://www.idefense.com/application/poi/display?id=155&type=vulnerabilities&flashstatus=true  View
63202 9436 CVE-2004-1008 BUGTRAQ:20041027 PuTTY SSH client vulnerability  View
63203 9436 CVE-2004-1008 URL:http://marc.info/?l=bugtraq&m=109889312917613&w=2  View
63204 9436 CVE-2004-1008 CONFIRM:http://www.chiark.greenend.org.uk/~sgtatham/putty/  View
63205 9436 CVE-2004-1008 CONFIRM:http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002414  View
63206 9436 CVE-2004-1008 CONFIRM:http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002416  View
63207 9436 CVE-2004-1008 GENTOO:GLSA-200410-29  View
63208 9436 CVE-2004-1008 URL:http://www.gentoo.org/security/en/glsa/glsa-200410-29.xml  View
63209 9436 CVE-2004-1008 SECUNIA:13012  View
63210 9436 CVE-2004-1008 URL:http://secunia.com/advisories/13012/  View
63211 9436 CVE-2004-1008 BID:11549  View
63212 9436 CVE-2004-1008 URL:http://www.securityfocus.com/bid/11549  View
63213 9436 CVE-2004-1008 SECUNIA:12987  View
63214 9436 CVE-2004-1008 URL:http://secunia.com/advisories/12987/  View
63215 9436 CVE-2004-1008 SECUNIA:17214  View
63216 9436 CVE-2004-1008 URL:http://secunia.com/advisories/17214  View
63217 9436 CVE-2004-1008 XF:putty-ssh2msgdebug-bo(17886)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61826 JVNDB-2005-000028 GNU Midnight Commander における無限ループが発生する脆弱性 GNU Midnight Commander (mc) には、無限ループによりサービル運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2004-1009 9436 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000028.html  View