critical10.0Public exploit code

CVE-2002-1359

Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possib…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

PuTTy.exe 0.53 - Remote Buffer Overflow (Metasploit)2010-06-15 · remote · windows · Verified
PuTTy.exe 0.53 - Validation Remote Buffer Overflow (Metasploit)2006-05-15 · remote · windows · Verified

Impact

Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.

Affected products

Vendor	Product	Affected versions
Cisco	Ios	Versions 12.0s, 12.0st, 12.1e, 12.1ea, 12.1t, 12.2
Fissh	Ssh Client	Version 1.0a_for_windows
Intersoft	Securenetterm	Version 5.4.1
Netcomposite	Shellguard Ssh	Version 3.4.6
Pragma Systems	Secureshell	Version 2.0
Putty	Putty	Versions 0.48, 0.49, 0.53
Winscp	Winscp	Version 2.0.0

Weakness classification

CWE-20

Public exploit code

Impact

Affected products

Weakness classification

References