PuTTY 0.56 Released

24seven · Post by **24seven** » Thu Oct 28, 2004 9:42 am

PuTTY 0.56 was released a few days ago.

2004-10-26 ANOTHER SECURITY HOLE, fixed in PuTTY 0.56

PuTTY 0.56, released today, fixes a serious security hole which can allow a server to execute code of its choice on a PuTTY client connecting to it. In SSH2, the attack can be performed before host key verification, meaning that even if you trust the server you think you are connecting to, a different machine could be impersonating it and could launch the attack before you could tell the difference. We recommend everybody upgrade to 0.56 as soon as possible.

That's two really bad holes in three months. I'd like to apologise to all our users for the inconvenience.

Find out more about PuTTY at its website.

kuun · Post by **kuun** » Sat Oct 30, 2004 11:21 pm

awesome

this was one of the coolest programs i've ever used,

i am grateful you posted this link!

Kuun