Buffer overflow in Cisco Ios
CVE-2002-1357
Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SS…
Vulnerability class: Buffer Overflow
EPSS: 0.098 (95.0th percentile) — read the EPSS interpretation.
Affected products
- Cisco Ios — versions 12.0s, 12.0st, 12.1e
- Fissh Ssh_client — versions 1.0a_for_windows
- Intersoft Securenetterm — versions 5.4.1
- Netcomposite Shellguard_ssh — versions 3.4.6
- Pragma_systems Secureshell — versions 2.0
- Putty — versions 0.48, 0.49, 0.53
- Winscp — versions 2.0.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_CERT, third-party-advisory)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (mailing-list, x_refsource_VULNWATCH)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2002-1357?
- CVE-2002-1357 is a vulnerability in Cisco Ios, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2002-12-23.
- Is CVE-2002-1357 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.