0.53b

DATE	CVE	VULNERABILITY TITLE	RISK
2004-12-31	CVE-2004-1440	Unspecified vulnerability in Putty Multiple heap-based buffer overflows in the modpow function in PuTTY before 0.55 allow (1) remote attackers to execute arbitrary code via an SSH2 packet with a base argument that is larger than the mod argument, which causes the modpow function to write memory before the beginning of its buffer, and (2) remote malicious servers to cause a denial of service (client crash) and possibly execute arbitrary code via a large bignum during authentication. network low complexity putty	7.5
2003-02-19	CVE-2003-0048	Unspecified vulnerability in Putty PuTTY 0.53b and earlier does not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials. local low complexity putty	4.6