CVE-2006-7162

PuTTY 0.59 and earlier uses weak file permissions for (1) ppk files containing private keys generated by puttygen and (2) session logs created by putty, which allows local users to gain sensitive information by reading these files.

Score

CVSS 2.0 1.9 Low

Status

Modified - cve@mitre.org

Published

2007-03-07

Last modified

2024-09-16

Affected products

• Putty (Putty)

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=400804
• http://secunia.com/advisories/24381