NVD

Id
80313  
Name
CVE-2002-1360  
Description
Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminated strings as implemented using languages such as C, as demonstrated by the SSHredder SSH protocol test suite.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-05  
Published
2002-12-23  
Modified Date
2009-03-04  
Seq
2002-1360  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
400450 80313 CVE-2002-1360 20021216 R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors  View
400451 80313 CVE-2002-1360 oval:org.mitre.oval:def:5797  View
400452 80313 CVE-2002-1360 1005812  View
400453 80313 CVE-2002-1360 1005813  View
400454 80313 CVE-2002-1360 CA-2002-36  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63998 JVNDB-2002-000325 SSH プロトコルを実装する複数の製品における Null 文字を含むパケットを適切に処理しない脆弱性 ------------ CVE-2002-1360 5744 CVE-2002-1360 80313 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000325.html 2002-12-16 2007-04-01 View