Description
Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
References
- 1005812 vdb-entry
- CA-2002-36 third-party-advisory
- oval:org.mitre.oval:def:5721 vdb-entry signature
- 20021216 R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors mailing-list
- 1005813 vdb-entry