CyberSec.Space Logo
Back to CVE Browser

CVE-2002-1358

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0730%
EPSS Percentile17.92th
PublishedDec 23, 2002
Last ModifiedApr 16, 2026

Vulnerability Description

Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.

Affected Platforms (CPE)

πŸ’»
Cisco

Ios

= 12.0s
πŸ’»
Cisco

Ios

= 12.0st
πŸ’»
Cisco

Ios

= 12.1e
πŸ’»
Cisco

Ios

= 12.1ea
πŸ’»
Cisco

Ios

= 12.1t
πŸ’»
Cisco

Ios

= 12.2
πŸ’»
Cisco

Ios

= 12.2s
πŸ’»
Cisco

Ios

= 12.2t
πŸ“¦
Fissh

Ssh Client

= 1.0a_for_windows
πŸ“¦
Intersoft

Securenetterm

= 5.4.1
πŸ“¦
Netcomposite

Shellguard Ssh

= 3.4.6
πŸ“¦
Pragma Systems

Secureshell

= 2.0
πŸ“¦
Putty

Putty

= 0.48
πŸ“¦
Putty

Putty

= 0.49
πŸ“¦
Putty

Putty

= 0.53
πŸ“¦
Winscp

Winscp

= 2.0.0

References & Advisories

Related Vulnerabilities