Lucene search
HistoryApr 02, 2003 - 5:00 a.m.
CVE-2002-1024
cisco
ios
12.0
12.2
ssh
denial of service
cpu consumption
cve-2002-1024
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
6.6 Medium
AI Score
Confidence
High
0.122 Low
EPSS
Percentile
95.4%
Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption) via a large packet that was designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144).
Affected configurations
Node
ciscoiosMatch12.0s
ORciscoiosMatch12.0sp
ORciscoiosMatch12.0st
ORciscoiosMatch12.0xb
ORciscoiosMatch12.0xm
ORciscoiosMatch12.0xv
ORciscoiosMatch12.1\(1\)ex
ORciscoiosMatch12.1\(5c\)ex
ORciscoiosMatch12.1\(8a\)ex
ORciscoiosMatch12.1\(9\)ex
ORciscoiosMatch12.1e
ORciscoiosMatch12.1ec
ORciscoiosMatch12.1t
ORciscoiosMatch12.1xb
ORciscoiosMatch12.1xc
ORciscoiosMatch12.1xf
ORciscoiosMatch12.1xg
ORciscoiosMatch12.1xh
ORciscoiosMatch12.1xi
ORciscoiosMatch12.1xj
ORciscoiosMatch12.1xl
ORciscoiosMatch12.1xm
ORciscoiosMatch12.1xp
ORciscoiosMatch12.1xq
ORciscoiosMatch12.1xt
ORciscoiosMatch12.1xu
ORciscoiosMatch12.1yb
ORciscoiosMatch12.1yc
ORciscoiosMatch12.1yd
ORciscoiosMatch12.1ye
ORciscoiosMatch12.1yf
ORciscoiosMatch12.1yi
ORciscoiosMatch12.2
ORciscoiosMatch12.2b
ORciscoiosMatch12.2bc
ORciscoiosMatch12.2da
ORciscoiosMatch12.2dd
ORciscoiosMatch12.2s
ORciscoiosMatch12.2t
ORciscoiosMatch12.2xa
ORciscoiosMatch12.2xb
ORciscoiosMatch12.2xd
ORciscoiosMatch12.2xe
ORciscoiosMatch12.2xf
ORciscoiosMatch12.2xg
ORciscoiosMatch12.2xh
ORciscoiosMatch12.2xi
ORciscoiosMatch12.2xj
ORciscoiosMatch12.2xk
ORciscoiosMatch12.2xl
ORciscoiosMatch12.2xm
ORciscoiosMatch12.2xn
ORciscoiosMatch12.2xq
ORciscoiosMatch12.2xr
ORciscoiosMatch12.2xs
ORciscoiosMatch12.2xt
ORciscoiosMatch12.2xw
ORciscoiosMatch12.2ya
ORciscoiosMatch12.2yb
ORciscoiosMatch12.2yc
ORciscoiosMatch12.2yd
ORciscoiosMatch12.2yf
ORciscoiosMatch12.2yg
ORciscoiosMatch12.2yh
ciscopix_firewall_softwareMatch5.2
ORciscopix_firewall_softwareMatch5.3
ORciscopix_firewall_softwareMatch6.0
ORciscopix_firewall_softwareMatch6.1
ORciscopix_firewall_softwareMatch6.2
ciscocss11000_content_services_switch
Node
ciscocatosMatch5.3\(1\)csx
ORciscocatosMatch5.3\(1a\)csx
ORciscocatosMatch5.3\(2\)csx
ORciscocatosMatch5.3\(3\)csx
ORciscocatosMatch5.3\(4\)csx
ORciscocatosMatch5.3\(5\)csx
ORciscocatosMatch5.3\(5a\)csx
ORciscocatosMatch5.3\(6\)csx
ORciscocatosMatch5.4
ORciscocatosMatch5.4\(1\)
ORciscocatosMatch5.4\(2\)
ORciscocatosMatch5.4\(3\)
ORciscocatosMatch5.4\(4\)
ORciscocatosMatch5.5
ORciscocatosMatch5.5\(1\)
ORciscocatosMatch5.5\(2\)
ORciscocatosMatch5.5\(3\)
ORciscocatosMatch5.5\(4\)
ORciscocatosMatch5.5\(4a\)
ORciscocatosMatch5.5\(4b\)
ORciscocatosMatch5.5\(13\)
ORciscocatosMatch6.1\(1\)
ORciscocatosMatch6.1\(1a\)
ORciscocatosMatch6.1\(1b\)
ORciscocatosMatch6.1\(1c\)
ORciscocatosMatch6.1\(2.13\)
ORciscocatosMatch6.2\(0.110\)
ORciscocatosMatch6.2\(0.111\)
ORciscocatosMatch6.3\(0.7\)pan
ORciscocatosMatch6.3\(4\)
ORciscocatosMatch7.1
ORciscocatosMatch7.1\(2\)
Related
nvd
nvd
cvelist
cvelist
nessus
nessus
Cisco Catalyst SSH Large Packet CPU Consumption DoS (CSCdv85279, CSCdw59394)
2003-03-14 00:00:00
Scanning for SSH Can Cause a Crash - Cisco Systems
2010-09-01 00:00:00
Cisco IOS SSH Large Packet CPU Consumption DoS (CSCdw33027)
2003-03-14 00:00:00
prion
prion
Design/Logic Flaw
2007-09-04 22:17:00
cve
cve
cert
cert
Multiple Cisco products consume excessive CPU resources in response to large SSH packets
2002-06-27 00:00:00
SSH CRC32 attack detection code contains remote integer overflow
2001-10-24 00:00:00
securityvulns
securityvulns
Netscreen SSH1 CRC32 Compensation Denial of service
2002-11-02 00:00:00
[CORE SDI ADVISORY] SSH1 CRC-32 compensation attack detector vulnerability
2001-02-10 00:00:00
BindView advisory: sshd remote root (bug in deattack.c)
2001-02-10 00:00:00
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
6.6 Medium
AI Score
Confidence
High
0.122 Low
EPSS
Percentile
95.4%
Related for CVE-2002-1024