Security Vulnerabilities fixed in PuTTY 0.73

Description

PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection. Also application mishandles the bracketed paste mode protection mechanism, which may allow a session to be affected by malicious clipboard content.

Affected Applications

PuTTY

CVE References

CVE-2019-17069 CVE-2019-17068 CVE-2019-17067

Other References

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-36367