Detections
Analytics

CVE-2003-0048

critical

Description

PuTTY 0.53b and earlier does not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.

References

http://www.securitytracker.com/id?1006014

http://www.securityfocus.com/bid/6724

http://www.idefense.com/advisory/01.28.03.txt

http://marc.info/?l=bugtraq&m=104386492422014&w=2

Details

Source: Mitre, NVD

Published: 2003-02-19

Updated: 2016-10-18

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical