Heap-based Buffer Overflows in PuTTY Affecting Remote Authentication

CVE-2004-1440

What is CVE-2004-1440?

Multiple heap-based buffer overflows were found in the modpow function of PuTTY prior to version 0.55. These vulnerabilities allow remote attackers to exploit SSH2 packets by sending a base argument larger than the mod argument, potentially leading to arbitrary code execution. Additionally, malicious servers can trigger a denial of service by sending a large bignum during authentication, which may crash the client and allow further exploitation.

References