CVE

Id
5744  
CVE No.
CVE-2002-1360  
Status
Candidate  
Description
Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminated strings as implemented using languages such as C, as demonstrated by the SSHredder SSH protocol test suite.  
Phase
Modified (20090302)  
Votes
ACCEPT(1) Baker | MODIFY(1) Frech | NOOP(2) Cole, Cox | REVIEWING(1) Wall  
Comments
Frech> XF:ssh-transport-null-string-bo(10871)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
31861 5744 CVE-2002-1360 VULNWATCH:20021216 R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors  View
31862 5744 CVE-2002-1360 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html  View
31863 5744 CVE-2002-1360 CERT:CA-2002-36  View
31864 5744 CVE-2002-1360 URL:http://www.cert.org/advisories/CA-2002-36.html  View
31865 5744 CVE-2002-1360 OVAL:oval:org.mitre.oval:def:5797  View
31866 5744 CVE-2002-1360 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5797  View
31867 5744 CVE-2002-1360 SECTRACK:1005812  View
31868 5744 CVE-2002-1360 URL:http://securitytracker.com/id?1005812  View
31869 5744 CVE-2002-1360 SECTRACK:1005813  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63998 JVNDB-2002-000325 SSH プロトコルを実装する複数の製品における Null 文字を含むパケットを適切に処理しない脆弱性 ------------ CVE-2002-1360 5744 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000325.html  View