Test ID:	1.3.6.1.4.1.25623.1.0.14262
Category:	Windows
Title:	PuTTY window title escape character arbitrary command execution
Summary:	PuTTY is prone to an arbitrary code execution vulnerability.
Description:	Summary: PuTTY is prone to an arbitrary code execution vulnerability. Vulnerability Insight: This version contains a flaw that may allow a malicious user to insert arbitrary commands and execute them. The issue is triggered when an attacker sends commands, preceded by terminal emulator escape sequences. Vulnerability Impact: It is possible that the flaw may allow arbitrary code execution resulting in a loss of integrity. Affected Software/OS: PuTTY prior to version 0.54. Solution: Update to version 0.54 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0069 Bugtraq: 20030224 Terminal Emulator Security Issues (Google Search) http://marc.info/?l=bugtraq&m=104612710031920&w=2 http://www.osvdb.org/8347 http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html http://www.iss.net/security_center/static/11414.php
Copyright	Copyright (C) 2005 David Maciejak

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.