CVE-2016-6167

Опубликовано: 30 янв. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 4.4

EPSS Низкий

Описание

Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) UxTheme.dll or (2) ntmarta.dll file in the current working directory.

Ссылки

http://www.securityfocus.com/archive/1/538848/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036236
Broken Link
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/137742/Putty-Beta-0.67-DLL-Hijacking.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/538848/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036236
Broken Link
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/137742/Putty-Beta-0.67-DLL-Hijacking.html
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:putty:putty:0.67:beta:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00752

Низкий

7.8 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-426

Связанные уязвимости

CVE-2016-6167

CVSS3: 7.8

ubuntu

больше 9 лет назад

CVE-2016-6167

CVSS3: 7.8

debian

больше 9 лет назад

Multiple untrusted search path vulnerabilities in Putty beta 0.67 allo ...

GHSA-7x75-r7f7-mqrx

CVSS3: 7.8

github

больше 4 лет назад

EPSS

Процентиль: 53%

0.00752

Низкий

7.8 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-426