CVE

Id
5742  
CVE No.
CVE-2002-1358  
Status
Candidate  
Description
Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.  
Phase
Modified (20090302)  
Votes
ACCEPT(1) Baker | MODIFY(1) Frech | NOOP(2) Cole, Cox | REVIEWING(1) Wall  
Comments
Frech> XF:ssh-transport-empty-lists-bo(10869)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
31839 5742 CVE-2002-1358 VULNWATCH:20021216 R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors  View
31840 5742 CVE-2002-1358 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html  View
31841 5742 CVE-2002-1358 CERT:CA-2002-36  View
31842 5742 CVE-2002-1358 URL:http://www.cert.org/advisories/CA-2002-36.html  View
31843 5742 CVE-2002-1358 OVAL:oval:org.mitre.oval:def:5721  View
31844 5742 CVE-2002-1358 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5721  View
31845 5742 CVE-2002-1358 SECTRACK:1005812  View
31846 5742 CVE-2002-1358 URL:http://securitytracker.com/id?1005812  View
31847 5742 CVE-2002-1358 SECTRACK:1005813  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63996 JVNDB-2002-000323 SSH プロトコルを実装する複数の製品における空の文字列を含むパケットを適切に処理しない脆弱性 ------------ CVE-2002-1358 5742 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000323.html  View