CVE-2002-1359
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may...
CVE-2002-1359 is a high vulnerability (CVSS 10.0) in Cisco Ios, published December 17, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 80.2%, the 99th percentile. No source names a fixed version.
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.
Exploit likelihood
What each source reports
NVD Score used
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.
- Record
CVE-2002-1359- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.
- Record
CVE-2002-1359- Updated
- 2026-11-02
EUVDEUVD-2002-1343 No score
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.
- Record
EUVD-2002-1343- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fxj2-7cf3-5hcm No score
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may...
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.
- Record
GHSA-fxj2-7cf3-5hcm- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PuTTy.exe 0.53 - Remote Buffer Overflow (Metasploit) | 2010-06-15 |
| Exploit-DB | PuTTy.exe 0.53 - Validation Remote Buffer Overflow (Metasploit) | 2006-05-15 |
| Metasploit | PuTTY Buffer Overflow | 2002-12-16 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
References
securitytracker.com/id?1005812
cert.org/advisories/CA-2002-36.html
exchange.xforce.ibmcloud.com/vulnerabilities/10870
archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html
securityfocus.com/bid/6407
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5848
nvd.nist.gov/vuln/detail/CVE-2002-1359
github.com/advisories/GHSA-fxj2-7cf3-5hcm