UnratedFix available
putty — security advisory
PuTTY 0.59 and earlier uses weak file permissions for (1) ppk files containing private keys generated by puttygen and (2) session logs created by putty, which allows local users to gain sensitive information by reading these files.
- Products
- putty
- Affected versions
- Not specified
- Fixed versions
- 0.59-1
- CVEs
- CVE-2006-7162
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 20:12 UTC · Revision 1
Source evidence
PuTTY 0.59 and earlier uses weak file permissions for (1) ppk files containing private keys generated by puttygen and (2) session logs created by putty, which allows local users to gain sensitive information by reading these files.
osv:DEBIAN-CVE-2006-7162
putty
Fixed versions: 0.59-1
putty
Fixed versions: 0.59-1
putty
Fixed versions: 0.59-1
Complete source record
{
"id": "298480c41d0325de7c72870fd25edf0dbf4345ef7f31bb077f08c0fbed02fa4a",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2006-7162",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2006-7162",
"summary": "PuTTY 0.59 and earlier uses weak file permissions for (1) ppk files containing private keys generated by puttygen and (2) session logs created by putty, which allows local users to gain sensitive information by reading these files.",
"evidence": "osv:DEBIAN-CVE-2006-7162",
"products": [
{
"name": {
"value": "putty",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.59-1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "putty",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.59-1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "putty",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.59-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "DEBIAN-CVE-2006-7162",
"aliases": [
"DEBIAN-CVE-2006-7162"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.59-1"
}
]
}
],
"package": {
"name": "putty",
"purl": "pkg:deb/debian/putty?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-7162.json"
},
"ecosystem_specific": {
"urgency": "unimportant"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.59-1"
}
]
}
],
"package": {
"name": "putty",
"purl": "pkg:deb/debian/putty?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-7162.json"
},
"ecosystem_specific": {
"urgency": "unimportant"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.59-1"
}
]
}
],
"package": {
"name": "putty",
"purl": "pkg:deb/debian/putty?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-7162.json"
},
"ecosystem_specific": {
"urgency": "unimportant"
}
}
],
"modified": "2026-10-22T23:47:23.166220986Z",
"provider": "osv",
"upstream": [
"CVE-2006-7162"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2006-7162"
]
},
"related_cves": [
{
"value": "CVE-2006-7162",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 410388,
"published_at": "2007-03-07T21:19:00+00:00"
}