CVE-2005-0467

CVE-2005-0467 describes multiple integer overflow vulnerabilities in the PSFTP and PSCP clients of PuTTY 0.56 and earlier. These flaws, specifically in the sftp_pkt_getstring and fxp_readdir_recv functions, allow remote malicious SFTP servers to execute arbitrary code by crafting responses that lead to heap corruption due to insufficient memory allocation. With a CVSS score of 7.5, this vulnerability is considered highly severe, requiring no authentication and having low attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this older vulnerability.