Tracker / CVE-2002-1360
CVE-2002-1360
High 10.0
Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminated strings as implemented using languages such as C, as demonstrated by the SSHredder SSH protocol test suite.
Affected products and versions
| cisco | ios |
|---|---|
| fissh | ssh_client |
| intersoft | securenetterm |
| netcomposite | shellguard_ssh |
| pragma_systems | secureshell |
| putty | putty |
| winscp | winscp |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.