← Database

CVE-2002-1357

CRITICAL CVSS: 10.0 Published: 2002-12-23 Modified: 2026-06-16

Description

Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.

Affected Platforms

Cisco IosIntersoft SecurenettermWinscp WinscpFissh Ssh ClientPragma Systems SecureshellNetcomposite Shellguard SshPutty Putty

Weakness Type

CWE-119

References