Description
Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
References
- 1005812 vdb-entry
- CA-2002-36 third-party-advisory
- oval:org.mitre.oval:def:5849 vdb-entry signature
- VU#389665 third-party-advisory
- ssh-transport-length-bo(10868) vdb-entry
- 20021216 R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors mailing-list
- 6405 vdb-entry
- 1005813 vdb-entry