OSVDB ID: 8347 Title: PuTTY Window Title Escape Character Arbitrary Command Execution |
Info |
|
|
Dates |
||||
|
|
Description |
Putty contains a flaw that may allow a malicious user to insert arbitrary commands and execute them. The issue is triggered when an attacker sends commands, preceded by terminal emulator escape sequences. It is possible that the flaw may allow arbitrary code execution resulting in a loss of integrity. |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Public |
Solution |
Upgrade to version 0.54 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|
metasploit.com - DigitalOffense