CVEvulnerability
CVE-2002-1645
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-11-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote attackers to execute arbitrary code via a long URL.
Affected configurations
• ssh ssh2 3.1
• ssh ssh2 3.1.1
• ssh ssh2 3.1.2
• ssh ssh2 3.1.3
• ssh ssh2 3.1.4
• ssh ssh2 3.2
References
- http://www.kb.cert.org/vuls/id/140977 Exploit, Patch, US Government Resource
- http://www.securityfocus.com/bid/6263 Patch
- http://www.ssh.com/company/newsroom/article/287/ Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10723 exchange.xforce.ibmcloud.com
- http://www.kb.cert.org/vuls/id/140977 Exploit, Patch, US Government Resource
- http://www.securityfocus.com/bid/6263 Patch
- http://www.ssh.com/company/newsroom/article/287/ Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10723 exchange.xforce.ibmcloud.com