PT-2003-1333 · Simon Tatham · Putty

Knud Erik Højgaard · Published 2003-02-01 · Updated 2016-10-18 · CVE-2003-0048

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PuTTY versions 0.53b and earlier

Description The issue concerns the storage of logon credentials in memory. Specifically, it does not clear credentials, including plaintext passwords, from memory, which could allow attackers with access to memory to steal the SSH credentials.

Recommendations For PuTTY versions 0.53b and earlier, update to a version that properly clears logon credentials from memory to prevent potential theft of SSH credentials.

Fix

Related Identifiers

CVE-2003-0048

Affected Products

Putty

References · 9

• https://osv.dev/vulnerability/CVE-2003-0048 · Vendor Advisory
• http://idefense.com/advisory/01.28.03.txt · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0048 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2003-0048 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0048 · Security Note
• http://marc.info/?l=bugtraq&m=104386492422014&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0048 · Note
• http://securityfocus.com/bid/6724 · Note
• http://securitytracker.com/id?1006014 · Note