CVE-2002-1357
Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
- EPSS
- 9.8% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cisco:ios
- fissh:ssh_client
- intersoft:securenetterm
- netcomposite:shellguard_ssh
- pragma_systems:secureshell
- putty:putty
- winscp:winscp