CVE-2002-1357: Buffer Overflow
Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1357?
CVE-2002-1357 is rated as a high severity vulnerability due to its potential to cause denial of service or arbitrary code execution.
How do I fix CVE-2002-1357?
To fix CVE-2002-1357, update your affected SSH servers and clients to the latest versions that address this vulnerability.
Which platforms are affected by CVE-2002-1357?
CVE-2002-1357 affects multiple versions of Cisco IOS as well as SSH clients like PuTTY and WinSCP.
What type of attacks can exploit CVE-2002-1357?
CVE-2002-1357 can be exploited to cause denial of service attacks and potentially allow attackers to execute arbitrary code.
Is CVE-2002-1357 still relevant today?
While it is an older vulnerability, CVE-2002-1357 is still relevant as it affects certain legacy systems that may still be in use.