CVE-2002-1024 Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption) via a large packet that was designed to exploit the SSH CRC32 attack detection....
HighCVSS 7.1
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption) via a large packet that was designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios | = 12.0s | No fix listed |
| cisco ios | = 12.0sp | No fix listed |
| cisco ios | = 12.0st | No fix listed |
| cisco ios | = 12.0xb | No fix listed |
| cisco ios | = 12.0xm | No fix listed |
| cisco ios | = 12.0xv | No fix listed |
| cisco ios | = 12.1(1)ex | No fix listed |
| cisco ios | = 12.1(5c)ex | No fix listed |
| cisco ios | = 12.1(8a)ex | No fix listed |
| cisco ios | = 12.1(9)ex | No fix listed |
| cisco ios | = 12.1e | No fix listed |
| cisco ios | = 12.1ec | No fix listed |
| cisco ios | = 12.1t | No fix listed |
| cisco ios | = 12.1xb | No fix listed |
| cisco ios | = 12.1xc | No fix listed |
| cisco ios | = 12.1xf | No fix listed |
| cisco ios | = 12.1xg | No fix listed |
| cisco ios | = 12.1xh | No fix listed |
| cisco ios | = 12.1xi | No fix listed |
| cisco ios | = 12.1xj | No fix listed |
| cisco ios | = 12.1xl | No fix listed |
| cisco ios | = 12.1xm | No fix listed |
| cisco ios | = 12.1xp | No fix listed |
| cisco ios | = 12.1xq | No fix listed |
| cisco ios | = 12.1xt | No fix listed |
Show 77 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios | = 12.1xu | No fix listed |
| cisco ios | = 12.1yb | No fix listed |
| cisco ios | = 12.1yc | No fix listed |
| cisco ios | = 12.1yd | No fix listed |
| cisco ios | = 12.1ye | No fix listed |
| cisco ios | = 12.1yf | No fix listed |
| cisco ios | = 12.1yi | No fix listed |
| cisco ios | = 12.2 | No fix listed |
| cisco ios | = 12.2b | No fix listed |
| cisco ios | = 12.2bc | No fix listed |
| cisco ios | = 12.2da | No fix listed |
| cisco ios | = 12.2dd | No fix listed |
| cisco ios | = 12.2s | No fix listed |
| cisco ios | = 12.2t | No fix listed |
| cisco ios | = 12.2xa | No fix listed |
| cisco ios | = 12.2xb | No fix listed |
| cisco ios | = 12.2xd | No fix listed |
| cisco ios | = 12.2xe | No fix listed |
| cisco ios | = 12.2xf | No fix listed |
| cisco ios | = 12.2xg | No fix listed |
| cisco ios | = 12.2xh | No fix listed |
| cisco ios | = 12.2xi | No fix listed |
| cisco ios | = 12.2xj | No fix listed |
| cisco ios | = 12.2xk | No fix listed |
| cisco ios | = 12.2xl | No fix listed |
| cisco ios | = 12.2xm | No fix listed |
| cisco ios | = 12.2xn | No fix listed |
| cisco ios | = 12.2xq | No fix listed |
| cisco ios | = 12.2xr | No fix listed |
| cisco ios | = 12.2xs | No fix listed |
| cisco ios | = 12.2xt | No fix listed |
| cisco ios | = 12.2xw | No fix listed |
| cisco ios | = 12.2ya | No fix listed |
| cisco ios | = 12.2yb | No fix listed |
| cisco ios | = 12.2yc | No fix listed |
| cisco ios | = 12.2yd | No fix listed |
| cisco ios | = 12.2yf | No fix listed |
| cisco ios | = 12.2yg | No fix listed |
| cisco ios | = 12.2yh | No fix listed |
| cisco pix firewall software | = 5.2 | No fix listed |
| cisco pix firewall software | = 5.3 | No fix listed |
| cisco pix firewall software | = 6.0 | No fix listed |
| cisco pix firewall software | = 6.1 | No fix listed |
| cisco pix firewall software | = 6.2 | No fix listed |
| cisco css11000 content services switch | All versions | No fix listed |
| cisco catos | = 5.3(1)csx | No fix listed |
| cisco catos | = 5.3(1a)csx | No fix listed |
| cisco catos | = 5.3(2)csx | No fix listed |
| cisco catos | = 5.3(3)csx | No fix listed |
| cisco catos | = 5.3(4)csx | No fix listed |
| cisco catos | = 5.3(5)csx | No fix listed |
| cisco catos | = 5.3(5a)csx | No fix listed |
| cisco catos | = 5.3(6)csx | No fix listed |
| cisco catos | = 5.4 | No fix listed |
| cisco catos | = 5.4(1) | No fix listed |
| cisco catos | = 5.4(2) | No fix listed |
| cisco catos | = 5.4(3) | No fix listed |
| cisco catos | = 5.4(4) | No fix listed |
| cisco catos | = 5.5 | No fix listed |
| cisco catos | = 5.5(1) | No fix listed |
| cisco catos | = 5.5(2) | No fix listed |
| cisco catos | = 5.5(3) | No fix listed |
| cisco catos | = 5.5(4) | No fix listed |
| cisco catos | = 5.5(4a) | No fix listed |
| cisco catos | = 5.5(4b) | No fix listed |
| cisco catos | = 5.5(13) | No fix listed |
| cisco catos | = 6.1(1) | No fix listed |
| cisco catos | = 6.1(1a) | No fix listed |
| cisco catos | = 6.1(1b) | No fix listed |
| cisco catos | = 6.1(1c) | No fix listed |
| cisco catos | = 6.1(2.13) | No fix listed |
| cisco catos | = 6.2(0.110) | No fix listed |
| cisco catos | = 6.2(0.111) | No fix listed |
| cisco catos | = 6.3(0.7)pan | No fix listed |
| cisco catos | = 6.3(4) | No fix listed |
| cisco catos | = 7.1 | No fix listed |
| cisco catos | = 7.1(2) | No fix listed |
References
- 20020627 Scanning for SSH Can Cause a Crash vendor-advisory
- cisco-ssh-scan-dos(9437) patch vdb-entry vendor-advisory
- VU#290140 third-party-advisory us-government-resource
- 5114 patch vdb-entry vendor-advisory