cve/2017/CVE-2017-6542.md

CVE-2017-6542

Description

The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which trigger a buffer overflow.

POC

Reference

• http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-agent-fwd-overflow.html
• https://www.exploit-db.com/exploits/42137/

Github

• https://github.com/kaleShashi/PuTTY
• https://github.com/pbr94/PuTTy-