Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2004-1008

Integer signedness error in the ssh2_rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2_MSG_DEBUG packet with a modified stringlen parameter, which leads to a buffer overflow.

  • Published: Jan 10, 2005
  • Updated: Apr 13, 2023
  • CVE: CVE-2004-1008
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
putty / putty 0.53 0.53.x
putty / putty 0.50 0.50.x
putty / putty 0.49 0.49.x
putty / putty 0.51 0.51.x
putty / putty 0.55 0.55.x
tortoisecvs / tortoisecvs 1.8 1.8.x
putty / putty 0.53b 0.53b.x
putty / putty 0.52 0.52.x
putty / putty 0.48 0.48.x
putty / putty 0.54 0.54.x