CVE-2002-1358
Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
- EPSS
- 5.8% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cisco:ios
- fissh:ssh_client
- intersoft:securenetterm
- netcomposite:shellguard_ssh
- pragma_systems:secureshell
- putty:putty
- winscp:winscp