In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directory as the executable.
References
Link | Resource |
---|---|
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html | Mailing List Third Party Advisory |
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html | Mailing List Third Party Advisory |
https://security.netapp.com/advisory/ntap-20190404-0001/ | Third Party Advisory |
https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html | Release Notes Third Party Advisory |
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html | Mailing List Third Party Advisory |
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html | Mailing List Third Party Advisory |
https://security.netapp.com/advisory/ntap-20190404-0001/ | Third Party Advisory |
https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html | Release Notes Third Party Advisory |
Configurations
History
21 Nov 2024, 04:52
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html - Mailing List, Third Party Advisory | |
References | () http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html - Mailing List, Third Party Advisory | |
References | () https://security.netapp.com/advisory/ntap-20190404-0001/ - Third Party Advisory | |
References | () https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html - Release Notes, Third Party Advisory |
Information
Published : 2019-03-21 16:01
Updated : 2024-11-21 04:52
NVD link : CVE-2019-9896
Mitre link : CVE-2019-9896
CVE.ORG link : CVE-2019-9896
JSON object : View
Products Affected
microsoft
- windows
putty
- putty
opensuse
- backports_sle
- leap
CWE
CWE-427
Uncontrolled Search Path Element