Improper input validation in Cisco Ios
CVE-2002-1359
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SS…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.802 (99.6th percentile) — read the EPSS interpretation.
Affected products
- Cisco Ios — versions 12.0s, 12.0st, 12.1e
- Fissh Ssh_client — versions 1.0a_for_windows
- Intersoft Securenetterm — versions 5.4.1
- Netcomposite Shellguard_ssh — versions 3.4.6
- Pragma_systems Secureshell — versions 2.0
- Putty — versions 0.48, 0.49, 0.53
- Winscp — versions 2.0.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_CERT, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_VULNWATCH)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2002-1359?
- CVE-2002-1359 is a vulnerability in Cisco Ios, classified under Improper Input Validation. Published 2002-12-23.
- Is CVE-2002-1359 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.