CVE ID:	CVE-2004-1440
Description:	Multiple heap-based buffer overflows in the modpow function in PuTTY before 0.55 allow (1) remote attackers to execute arbitrary code via an SSH2 packet with a base argument that is larger than the mod argument, which causes the modpow function to write memory before the beginning of its buffer, and (2) remote malicious servers to cause a denial of service (client crash) and possibly execute arbitrary code via a large bignum during authentication.
Test IDs:	1.3.6.1.4.1.25623.1.0.14236   1.3.6.1.4.1.25623.1.0.54634
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1440 BugTraq ID: 10850 http://www.securityfocus.com/bid/10850 Bugtraq: 20040804 CORE-2004-0705: Vulnerabilities in PuTTY and PSCP (Google Search) http://marc.info/?l=bugtraq&m=109167869528138&w=2 http://www.gentoo.org/security/en/glsa/glsa-200408-04.xml http://secunia.com/advisories/12212/ XForce ISS Database: putty-code-execution(16885) https://exchange.xforce.ibmcloud.com/vulnerabilities/16885