CVE

Id
9868  
CVE No.
CVE-2004-1440  
Status
Candidate  
Description
Multiple heap-based buffer overflows in the modpow function in PuTTY before 0.55 allow (1) remote attackers to execute arbitrary code via an SSH2 packet with a base argument that is larger than the mod argument, which causes the modpow function to write memory before the beginning of its buffer, and (2) remote malicious servers to cause a denial of service (client crash) and possibly execute arbitrary code via a large bignum during authentication.  
Phase
Assigned (20050213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
67377 9868 CVE-2004-1440 BUGTRAQ:20040804 CORE-2004-0705: Vulnerabilities in PuTTY and PSCP  View
67378 9868 CVE-2004-1440 URL:http://marc.info/?l=bugtraq&m=109167869528138&w=2  View
67379 9868 CVE-2004-1440 CONFIRM:http://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html  View
67380 9868 CVE-2004-1440 CONFIRM:http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-modpow.html  View
67381 9868 CVE-2004-1440 GENTOO:GLSA-200408-04  View
67382 9868 CVE-2004-1440 URL:http://www.gentoo.org/security/en/glsa/glsa-200408-04.xml  View
67383 9868 CVE-2004-1440 BID:10850  View
67384 9868 CVE-2004-1440 URL:http://www.securityfocus.com/bid/10850  View
67385 9868 CVE-2004-1440 SECUNIA:12212  View
67386 9868 CVE-2004-1440 URL:http://secunia.com/advisories/12212/  View
67387 9868 CVE-2004-1440 XF:putty-code-execution(16885)  View

Related JVN