CVE-2002-1359 Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer over...
HighCVSS 10.0
EPSS 80.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios | = 12.0s | No fix listed |
| cisco ios | = 12.0st | No fix listed |
| cisco ios | = 12.1e | No fix listed |
| cisco ios | = 12.1ea | No fix listed |
| cisco ios | = 12.1t | No fix listed |
| cisco ios | = 12.2 | No fix listed |
| cisco ios | = 12.2s | No fix listed |
| cisco ios | = 12.2t | No fix listed |
| fissh ssh client | = 1.0a_for_windows | No fix listed |
| intersoft securenetterm | = 5.4.1 | No fix listed |
| netcomposite shellguard ssh | = 3.4.6 | No fix listed |
| pragma systems secureshell | = 2.0 | No fix listed |
| putty | = 0.48 | No fix listed |
| putty | = 0.49 | No fix listed |
| putty | = 0.53 | No fix listed |
| winscp | = 2.0.0 | No fix listed |
References
- Debian Security Tracker CVE-2002-1359 vendor-advisory
- 20021216 R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors mailing-list vendor-advisory
- 1005812 vdb-entry
- 1005813 vdb-entry
- CA-2002-36 third-party-advisory us-government-resource
- 6407 vdb-entry
- ssh-transport-multiple-bo(10870) vdb-entry
- oval:org.mitre.oval:def:5848 signature vdb-entry