PT-2003-1333 · Simon Tatham · Putty

Knud Erik Højgaard · Publicado 2003-02-01 · Atualizado 2016-10-18 · CVE-2003-0048

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PuTTY versions 0.53b and earlier

Description The issue concerns the storage of logon credentials in memory. Specifically, it does not clear credentials, including plaintext passwords, from memory, which could allow attackers with access to memory to steal the SSH credentials.

Recommendations For PuTTY versions 0.53b and earlier, update to a version that properly clears logon credentials from memory to prevent potential theft of SSH credentials.

Correção

Identificadores relacionados

CVE-2003-0048

Produtos afetados

Putty

Referências · 9

• http://marc.info/?l=bugtraq&m=104386492422014&w=2 · Nota
• https://osv.dev/vulnerability/CVE-2003-0048 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0048 · Nota
• http://idefense.com/advisory/01.28.03.txt · Aviso do Fabricante
• http://securityfocus.com/bid/6724 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0048 · Aviso do Fabricante
• http://securitytracker.com/id?1006014 · Nota
• https://security-tracker.debian.org/tracker/CVE-2003-0048 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-0048 · Nota de Segurança