CVE-2002-1359: Input Validation
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1359?
CVE-2002-1359 has a severity rating that can lead to denial of service and potential arbitrary code execution.
How do I fix CVE-2002-1359?
Users should update their SSH clients and servers to the latest versions that patch this vulnerability.
Which systems are affected by CVE-2002-1359?
CVE-2002-1359 affects several versions of Cisco IOS, PuTTY, WinSCP, and other SSH clients and servers.
What type of attack does CVE-2002-1359 allow?
CVE-2002-1359 allows attackers to perform buffer overflow attacks through large packets or fields.
Is CVE-2002-1359 still a risk today?
While CVE-2002-1359 is an older vulnerability, systems running outdated software versions may still be at risk.