Description
Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminated strings as implemented using languages such as C, as demonstrated by the SSHredder SSH protocol test suite.
References
- 1005812 vdb-entry
- oval:org.mitre.oval:def:5797 vdb-entry signature
- CA-2002-36 third-party-advisory
- 20021216 R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors mailing-list
- 1005813 vdb-entry