Tracker / CVE-2002-1358
CVE-2002-1358
High 10.0
Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
Affected products and versions
| cisco | ios |
|---|---|
| fissh | ssh_client |
| intersoft | securenetterm |
| netcomposite | shellguard_ssh |
| pragma_systems | secureshell |
| putty | putty |
| winscp | winscp |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.