CVE-2002-1357

2002-12-2305:00:00

CWE-119

[email protected]

web.nvd.nist.gov

cve

ssh2

servers

clients

denial of service

arbitrary code execution

security vulnerability

7.6 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.193 Low

EPSS

Percentile

96.2%

JSON

Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.

CPENameOperatorVersion
cisco:ioscisco ioseq12.0s
cisco:ioscisco ioseq12.0st
cisco:ioscisco ioseq12.1e
cisco:ioscisco ioseq12.1ea
cisco:ioscisco ioseq12.1t
cisco:ioscisco ioseq12.2
cisco:ioscisco ioseq12.2s
cisco:ioscisco ioseq12.2t
fissh:ssh_clientfissh ssh clienteq1.0a_for_windows
intersoft:securenettermintersoft securenettermeq5.4.1

CPE	Name	Operator	Version
cisco:ios	cisco ios	eq	12.0s
cisco:ios	cisco ios	eq	12.0st
cisco:ios	cisco ios	eq	12.1e
cisco:ios	cisco ios	eq	12.1ea
cisco:ios	cisco ios	eq	12.1t
cisco:ios	cisco ios	eq	12.2
cisco:ios	cisco ios	eq	12.2s
cisco:ios	cisco ios	eq	12.2t
fissh:ssh_client	fissh ssh client	eq	1.0a_for_windows
intersoft:securenetterm	intersoft securenetterm	eq	5.4.1