CVE-2002-1359

2002-12-2305:00:00

CWE-20

[email protected]

web.nvd.nist.gov

100

ssh2

servers

clients

vulnerability

denial of service

buffer overflow

ssh protocol

nvd

8.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.972 High

EPSS

Percentile

99.8%

JSON

Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.

CPENameOperatorVersion
cisco:ioscisco ioseq12.0s
cisco:ioscisco ioseq12.0st
cisco:ioscisco ioseq12.1e
cisco:ioscisco ioseq12.1ea
cisco:ioscisco ioseq12.1t
cisco:ioscisco ioseq12.2
cisco:ioscisco ioseq12.2s
cisco:ioscisco ioseq12.2t
fissh:ssh_clientfissh ssh clienteq1.0a_for_windows
intersoft:securenettermintersoft securenettermeq5.4.1

CPE	Name	Operator	Version
cisco:ios	cisco ios	eq	12.0s
cisco:ios	cisco ios	eq	12.0st
cisco:ios	cisco ios	eq	12.1e
cisco:ios	cisco ios	eq	12.1ea
cisco:ios	cisco ios	eq	12.1t
cisco:ios	cisco ios	eq	12.2
cisco:ios	cisco ios	eq	12.2s
cisco:ios	cisco ios	eq	12.2t
fissh:ssh_client	fissh ssh client	eq	1.0a_for_windows
intersoft:securenetterm	intersoft securenetterm	eq	5.4.1