Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote malicious users to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cisco ios 12.0s |
||
cisco ios 12.0st |
||
cisco ios 12.1e |
||
cisco ios 12.1ea |
||
cisco ios 12.1t |
||
cisco ios 12.2 |
||
cisco ios 12.2s |
||
cisco ios 12.2t |
||
fissh ssh client 1.0a for windows |
||
intersoft securenetterm 5.4.1 |
||
netcomposite shellguard ssh 3.4.6 |
||
pragma systems secureshell 2.0 |
||
putty putty 0.48 |
||
putty putty 0.49 |
||
putty putty 0.53 |
||
winscp winscp 2.0.0 |
Vulmon