CVE-2002-1645

NONE EPSS 94.0%

Published Nov 25, 200223y ago · Modified Jun 16, 20262w ago

Published Nov 25, 2002 23y ago

Last Modified Jun 16, 2026 2w ago

Description

Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote attackers to execute arbitrary code via a long URL.

Threat Intelligence

EPSS Exploit Probability

94.0% percentile

Exploit & Patch Status

Public Exploit Known

Patch Available

Affected Products 6

Vendor	Product	Version	Range
ssh	ssh2	3.1	any
ssh	ssh2	3.1.1	any
ssh	ssh2	3.1.2	any
ssh	ssh2	3.1.3	any
ssh	ssh2	3.1.4	any
ssh	ssh2	3.2	any

References 4

kb.cert.org http://www.kb.cert.org/vuls/id/140977

ExploitPatchUS Government Resource
securityfocus.com http://www.securityfocus.com/bid/6263

Patch
ssh.com http://www.ssh.com/company/newsroom/article/287/

ExploitPatch
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/10723

Remediation

kb.cert.org http://www.kb.cert.org/vuls/id/140977

ExploitPatchUS Government Resource
securityfocus.com http://www.securityfocus.com/bid/6263

Patch
ssh.com http://www.ssh.com/company/newsroom/article/287/

ExploitPatch