CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2002-1645

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1970%
EPSS Percentile13.88th
Published2002年11月25日
Last Modified2026年4月16日

Vulnerability Description

Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote attackers to execute arbitrary code via a long URL.

Affected Platforms (CPE)

📦
Ssh

Ssh2

= 3.1
📦
Ssh

Ssh2

= 3.1.1
📦
Ssh

Ssh2

= 3.1.2
📦
Ssh

Ssh2

= 3.1.3
📦
Ssh

Ssh2

= 3.1.4
📦
Ssh

Ssh2

= 3.2

References & Advisories

🔗 http://www.kb.cert.org/vuls/id/140977
🔗 http://www.securityfocus.com/bid/6263
🔗 http://www.ssh.com/company/newsroom/article/287/
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/10723
🔗 http://www.kb.cert.org/vuls/id/140977
🔗 http://www.securityfocus.com/bid/6263
🔗 http://www.ssh.com/company/newsroom/article/287/
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/10723

相關漏洞威脅

CVE-2002-135810.0

Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to...

CVE-2002-135910.0

Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause ...

CVE-2002-135710.0

Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allo...

CVE-2002-136010.0

Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified ...