Описание
PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection.
Ссылки
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.73 (исключая)
Одновременно
cpe:2.3:a:putty:putty:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
EPSS
Процентиль: 76%
0.01634
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-770
Связанные уязвимости
CVSS3: 9.8
ubuntu
около 7 лет назад
PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection.
CVSS3: 9.8
debian
около 7 лет назад
PuTTY before 0.73 on Windows improperly opens port-forwarding listenin ...
github
больше 4 лет назад
PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection.
CVSS3: 9.8
altlinux
около 7 лет назад
ALT-PU-2019-2805: package `putty` update to version 0.73-alt1
EPSS
Процентиль: 76%
0.01634
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-770