Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-1vwp-yqcr-nkg6 |
| Summary | Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite. |
| Aliases |
|
| Fixed_packages |
|
| Affected_packages |
|
| References |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2002-1359 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.86998 |
| scoring_system |
epss |
| scoring_elements |
0.9943 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.86998 |
| scoring_system |
epss |
| scoring_elements |
0.99429 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.86998 |
| scoring_system |
epss |
| scoring_elements |
0.99431 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.86998 |
| scoring_system |
epss |
| scoring_elements |
0.99433 |
| published_at |
2026-04-09T12:55:00Z |
|
| 4 |
| value |
0.86998 |
| scoring_system |
epss |
| scoring_elements |
0.99435 |
| published_at |
2026-04-11T12:55:00Z |
|
| 5 |
| value |
0.86998 |
| scoring_system |
epss |
| scoring_elements |
0.99436 |
| published_at |
2026-04-13T12:55:00Z |
|
| 6 |
| value |
0.86998 |
| scoring_system |
epss |
| scoring_elements |
0.99439 |
| published_at |
2026-04-18T12:55:00Z |
|
| 7 |
| value |
0.86998 |
| scoring_system |
epss |
| scoring_elements |
0.99438 |
| published_at |
2026-04-21T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2002-1359 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| Weaknesses |
|
| Exploits |
| 0 |
| date_added |
null |
| description |
This module exploits a buffer overflow in the PuTTY SSH client that is
triggered through a validation error in SSH.c. This vulnerability
affects versions 0.53 and earlier. |
| required_action |
null |
| due_date |
null |
| notes |
Reliability:
- unknown-reliability
Stability:
- unknown-stability
SideEffects:
- unknown-side-effects
|
| known_ransomware_campaign_use |
false |
| source_date_published |
2002-12-16 |
| exploit_type |
null |
| platform |
Windows |
| source_date_updated |
null |
| data_source |
Metasploit |
| source_url |
https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/windows/ssh/putty_msg_debug.rb |
|
| 1 |
| date_added |
2006-05-14 |
| description |
PuTTy.exe 0.53 - Validation Remote Buffer Overflow (Metasploit) |
| required_action |
null |
| due_date |
null |
| notes |
null |
| known_ransomware_campaign_use |
true |
| source_date_published |
2006-05-15 |
| exploit_type |
remote |
| platform |
windows |
| source_date_updated |
2016-07-29 |
| data_source |
Exploit-DB |
| source_url |
http://www.rapid7.com/advisories/R7-0009.html |
|
|
| Severity_range_score | null |
| Exploitability | null |
| Weighted_severity | null |
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-1vwp-yqcr-nkg6 |