CVE-2002-1359

Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or…

published December 17, 2002

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.6th percentile for exploit probability.

CVSS
—
EPSS
80%
Percentile
99.6
In the wild
Unconfirmed
What it is

⚠️ This vulnerability could turn your SSH connection into a shaky bridge over troubled waters! 🚧 Think of SSH as a delivery truck carrying your precious data. If the truck breaks down due to oversized packages, your deliveries could be delayed or lost altogether! An attacker could exploit this flaw by sending oversized packets, potentially causing a denial of service. Worst case scenario? They might even execute arbitrary code on your system, which could lead to a complete compromise!

Put simply

Think of SSH as a delivery truck carrying your precious data. If the truck breaks down due to oversized packages, your deliveries could be delayed or lost altogether! This vulnerability arises because multiple SSH2 servers and clients mishandle large packets or fields, leading to possible buffer overflow attacks. This can be demonstrated using the SSHredder test suite, aiming to exploit the weakness.

What to do

An attacker could exploit this flaw by sending oversized packets, potentially causing a denial of service. Worst case scenario? They might even execute arbitrary code on your system, which could lead to a complete compromise! To mitigate this risk, ensure that your SSH server and client software are updated to the latest versions that include fixes for this flaw. Regularly monitor your systems for unusual behavior that may signal exploitation attempts. 🔒 You've got this! Stay vigilant and keep your connection secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.80233 · 99.6th percentile
Published
2002-12-17T05:00Z
EPSS history
Timeline
  • 17 DEC 05:00Z
    Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or…
    cvelistv5