critical10.0
CVE-2002-1358
Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or…
Impact
Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Ios | Versions 12.0s, 12.0st, 12.1e, 12.1ea, 12.1t, 12.2 |
| Fissh | Ssh Client | Version 1.0a_for_windows |
| Intersoft | Securenetterm | Version 5.4.1 |
| Netcomposite | Shellguard Ssh | Version 3.4.6 |
| Pragma Systems | Secureshell | Version 2.0 |
| Putty | Putty | Versions 0.48, 0.49, 0.53 |
| Winscp | Winscp | Version 2.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html
- http://securitytracker.com/id?1005812
- http://securitytracker.com/id?1005813
- http://www.cert.org/advisories/CA-2002-36.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5721
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html
- http://securitytracker.com/id?1005812
- http://securitytracker.com/id?1005813
- http://www.cert.org/advisories/CA-2002-36.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5721