CVE-2006-7162

{"id": "CVE-2006-7162", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 1.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-03-07T21:19:00.000", "references": [{"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=400804", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/24381", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "PuTTY 0.59 and earlier uses weak file permissions for (1) ppk files containing private keys generated by puttygen and (2) session logs created by putty, which allows local users to gain sensitive information by reading these files."}, {"lang": "es", "value": "PuTTY 0.59 y versiones anteriores utiliza un fichero de permisos d\u00e9bil para (1) ficheros ppk que contienen las claves privadas generadas por el puttygen y (2) los logs de sesi\u00f3n creados por el putty, lo que permite a usuarios locales la obtenci\u00f3n de informaci\u00f3n sensible mediante la lectura de estos ficheros."}], "lastModified": "2008-09-05T21:16:34.777", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:putty:putty:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0AB780F8-A784-4757-95AD-8B07A30C3745", "versionEndIncluding": "0.59"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}