Memory Management Flaw in PuTTY by Simon Tatham

CVE-2011-4607

What is CVE-2011-4607?

PuTTY versions 0.59 through 0.61 contain a vulnerability in their memory management processes during keyboard-interactive authentication. This flaw prevents the proper clearing of sensitive process memory when handling user replies, posing a risk that allows local users with access to the system to retrieve sensitive data such as login passwords from the process memory. This vulnerability highlights the importance of secure memory management practices to safeguard user credentials during authentication processes.

References