CVE-2005-0467

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-02-21 · updated 2026-06-16

Description

Multiple integer overflows in the (1) sftp_pkt_getstring and (2) fxp_readdir_recv functions in the PSFTP and PSCP clients for PuTTY 0.56, and possibly earlier versions, allow remote malicious web sites to execute arbitrary code via SFTP responses that corrupt the heap after insufficient memory has been allocated.

Affected products

PuTTY: through 0.56

References

http://secunia.com/advisories/14333
http://secunia.com/advisories/17214
http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002414
http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002416
http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-readdir.html
http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-string.html
http://www.gentoo.org/security/en/glsa/glsa-200502-28.xml
http://www.idefense.com/application/poi/display?id=201&type=vulnerabilities
https://exchange.xforce.ibmcloud.com/vulnerabilities/19403
http://secunia.com/advisories/14333
http://secunia.com/advisories/17214
http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002414

Get alerted when CVE-2005-0467 or the next vulnerability affects your stack