CVE-2004-1008: Buffer Overflow
Integer signedness error in the ssh2rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2MSGDEBUG packet with a modified stringlen parameter, which leads to a buffer overflow.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1008?
CVE-2004-1008 is rated as high severity due to its potential to allow arbitrary code execution through a buffer overflow.
How do I fix CVE-2004-1008?
To fix CVE-2004-1008, update PuTTY to version 0.56 or later, which resolves the integer signedness error.
Which versions of PuTTY are affected by CVE-2004-1008?
Versions of PuTTY before 0.56, including 0.50, 0.51, 0.52, 0.53, and 0.54, are affected by CVE-2004-1008.
What is the impact of CVE-2004-1008 on affected systems?
The impact of CVE-2004-1008 on affected systems includes the risk of remote attackers executing arbitrary code.
Who is at risk due to CVE-2004-1008?
Users of PuTTY versions prior to 0.56 are at risk due to CVE-2004-1008, especially those exposed to untrusted networks.