CVE-2002-1360: Input Validation
Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminated strings as implemented using languages such as C, as demonstrated by the SSHredder SSH protocol test suite.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1360?
The severity of CVE-2002-1360 ranges from a denial of service to the potential execution of arbitrary code.
How do I fix CVE-2002-1360?
To fix CVE-2002-1360, update your SSH server or client to a patched version that mitigates the vulnerability.
Which versions are affected by CVE-2002-1360?
CVE-2002-1360 affects multiple versions of Cisco IOS and several SSH clients, including PuTTY and WinSCP.
What type of vulnerability is CVE-2002-1360?
CVE-2002-1360 is a vulnerability that involves improper handling of null characters in strings.
Who can exploit CVE-2002-1360?
Remote attackers can exploit CVE-2002-1360 to potentially disrupt service or execute arbitrary code on vulnerable systems.