Download PuTTY: release 0.60

0.60, released on 2007-04-29, is not the latest release. See the Latest Release page for the most up-to-date release (currently 0.74).

Past releases of PuTTY are versions we thought were reasonably likely to work well, at the time they were released. However, later releases will almost always have fixed bugs and/or added new features. If you have a problem with this release, please try the latest release, to see if the problem has already been fixed.

SECURITY WARNING

This release has known security vulnerabilities. Consider using a later release instead, such as the latest version, 0.74.

The known vulnerabilities in this release are:

password-not-wiped (fixed in release 0.62)
private-key-not-wiped (fixed in release 0.63)
private-key-not-wiped-2 (fixed in release 0.64)
vuln-agent-fwd-overflow (fixed in release 0.68)
vuln-agent-keylist-used-after-free (fixed in release 0.74)
vuln-auth-prompt-spoofing (fixed in release 0.71)
vuln-bignum-division-by-zero (fixed in release 0.63)
vuln-chm-hijack (fixed in release 0.71)
vuln-ech-overflow (fixed in release 0.66)
vuln-fd-set-overflow (fixed in release 0.71)
vuln-indirect-dll-hijack (fixed in release 0.68)
vuln-indirect-dll-hijack-2 (fixed in release 0.69)
vuln-indirect-dll-hijack-3 (fixed in release 0.70)
vuln-modmul (fixed in release 0.63)
vuln-pscp-sink-sscanf (fixed in release 0.67)
vuln-rng-reuse (fixed in release 0.71)
vuln-signature-stringlen (fixed in release 0.63)
vuln-ssh1-buffer-length-underflow (fixed in release 0.72)
vuln-ssh1-short-rsa-keys (fixed in release 0.72)
vuln-terminal-dos-combining-chars (fixed in release 0.71)
vuln-terminal-dos-combining-chars-double-width-gtk (fixed in release 0.71)
vuln-terminal-dos-one-column-cjk (fixed in release 0.71)
vuln-win-exclusiveaddruse (fixed in release 0.73)
vuln-win-pageant-client-missing-length-check (fixed in release 0.72)

Package files

You probably want one of these. They include versions of all the PuTTY utilities.

SECURITY WARNING: The main installer for this release was built with a version of Inno Setup that had a DLL hijacking vulnerability. If you need to run this file, copy it into an empty directory first, to prevent attack by malicious DLLs in your download directory.

.EXE installer created with Inno Setup

32-bit: putty-0.60-installer.exe (or by FTP) (RSA sig) (DSA sig)

Unix source archive

.tar.gz: putty-0.60.tar.gz (or by FTP) (RSA sig) (DSA sig)

Alternative binary files

The installer packages above will provide versions of all of these (except PuTTYtel), but you can download standalone binaries one by one if you prefer.

putty.exe (the SSH and Telnet client itself)

32-bit: putty.exe (or by FTP) (RSA sig) (DSA sig)

pscp.exe (an SCP client, i.e. command-line secure file copy)

32-bit: pscp.exe (or by FTP) (RSA sig) (DSA sig)

psftp.exe (an SFTP client, i.e. general file transfer sessions much like FTP)

32-bit: psftp.exe (or by FTP) (RSA sig) (DSA sig)

puttytel.exe (a Telnet-only client)

32-bit: puttytel.exe (or by FTP) (RSA sig) (DSA sig)

plink.exe (a command-line interface to the PuTTY back ends)

32-bit: plink.exe (or by FTP) (RSA sig) (DSA sig)

pageant.exe (an SSH authentication agent for PuTTY, PSCP, PSFTP, and Plink)

32-bit: pageant.exe (or by FTP) (RSA sig) (DSA sig)