CVE-2003-0069: High severity Putty PuTTY vulnerability
The PuTTY terminal emulator 0.53 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0069?
CVE-2003-0069 is considered a high-severity vulnerability due to its ability to allow command injection from an attacker.
How do I fix CVE-2003-0069?
To mitigate CVE-2003-0069, upgrade to a newer version of PuTTY that is not affected, as version 0.54 and above have patched this vulnerability.
What systems are affected by CVE-2003-0069?
CVE-2003-0069 specifically affects PuTTY version 0.53.
What kind of attacks can be performed using CVE-2003-0069?
Attackers can exploit CVE-2003-0069 to modify the terminal window title and execute arbitrary commands by tricking users into viewing malicious files.
Is CVE-2003-0069 an ongoing risk?
CVE-2003-0069 is largely mitigated in modern systems due to users upgrading away from the vulnerable version, but it remains a risk for users still using PuTTY 0.53.