~ubuntu-security/ubuntu-cve-tracker/master

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
Candidate: CVE-2016-6167
PublicDate: 2017-01-30
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6167
 https://packetstormsecurity.com/files/137742/Putty-Beta-0.67-DLL-Hijacking.html
Description:
 Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow
 local users to execute arbitrary code and conduct DLL hijacking attacks via
 a Trojan horse (1) UxTheme.dll or (2) ntmarta.dll file in the current
 working directory.
Ubuntu-Description:
Notes:
 sarnold> Windows DLL troubles
Bugs:
Priority: negligible
Discovered-by: Sachin Wagh
Assigned-to:

Patches_putty:
upstream_putty: not-affected
precise_putty: not-affected
trusty_putty: not-affected
vivid/stable-phone-overlay_putty: DNE
vivid/ubuntu-core_putty: DNE
xenial_putty: not-affected
yakkety_putty: not-affected
devel_putty: not-affected