CVE-2002-1358: Input Validation
Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1358?
CVE-2002-1358 has a severity rating that indicates it can cause a denial of service and potentially lead to arbitrary code execution.
How do I fix CVE-2002-1358?
To fix CVE-2002-1358, you should update your SSH clients and servers to the latest versions that include patches for this vulnerability.
Which versions are affected by CVE-2002-1358?
CVE-2002-1358 affects various versions of Cisco IOS and other SSH clients like PuTTY and WinSCP among others.
Can CVE-2002-1358 be exploited remotely?
Yes, CVE-2002-1358 can be exploited remotely by attackers, allowing them to potentially disrupt services or execute code.
Is there a workaround for CVE-2002-1358?
While the recommended action is to apply updates, temporarily restricting access to affected services may serve as a workaround for CVE-2002-1358.