CVE-2002-1359
Cisco IOS - Denial of Service via Large SSH Packet Handling
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2002-1359.
PoCs published by Metasploit, y0, including Metasploit module exploits/windows/ssh/putty_msg_debug.
AI-analyzed exploit summary This is a Metasploit module exploiting a buffer overflow in PuTTY SSH client (CVE-2002-1359) via a malformed SSH protocol message. It targets Windows systems and delivers a payload to achieve remote code execution.
Description
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.
Exploits (3)
This is a Metasploit module exploiting a buffer overflow in PuTTY SSH client (CVE-2002-1359) via a malformed SSH protocol message. It targets Windows systems and delivers a payload to achieve remote code execution.
This exploit targets a buffer overflow vulnerability in PuTTY SSH client versions up to 0.53. It sends a maliciously crafted SSH-2.0 banner to trigger the overflow, allowing arbitrary code execution on the target system.
This Metasploit module exploits a buffer overflow in PuTTY SSH client (versions 0.53 and earlier) via a malformed SSH-2.0 banner. It triggers a stack-based overflow in SSH.c, allowing remote code execution on vulnerable Windows systems.