Improper input validation in Cisco Ios
CVE-2002-1358
Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.058 (92.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Ios — versions 12.0s, 12.0st, 12.1e
- Fissh Ssh_client — versions 1.0a_for_windows
- Intersoft Securenetterm — versions 5.4.1
- Netcomposite Shellguard_ssh — versions 3.4.6
- Pragma_systems Secureshell — versions 2.0
- Putty — versions 0.48, 0.49, 0.53
- Winscp — versions 2.0.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_CERT, third-party-advisory)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (mailing-list, x_refsource_VULNWATCH)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)