CVE:CVE-2002-1357
CNNVD:CNNVD-200212-040
SSH协议可以使客户端和服务端之间建立加密通信。Rapid7开发了SSHredde测试工具，针对连接初始化，KEY交换，SSH传输层协议密码字段协商等过程进行详细测试。
在测试过程中发现多个SSH2服务器和客户端不正确处理非法长度(如零，负整数长度等)的包和数据元素，远程攻击者可以利用这个漏洞进行拒绝服务攻击或可能以进程权限执行任意代码。
目前没有更详细的漏洞细节。
solution:Upgrade cisco ios to a higher version than 12.0s,12.0st,12.1e,12.1ea,12.1t,12.2,12.2s,12.2t,and avoid the version 12.0s,12.0st,12.1e,12.1ea,12.1t,12.2,12.2s,12.2t; Upgrade fissh ssh_client to a higher version than 1.0a_for_windows,and avoid the version 1.0a_for_windows; Upgrade intersoft securenetterm to a higher version than 5.4.1,and avoid the version 5.4.1; Upgrade netcomposite shellguard_ssh to a higher version than 3.4.6,and avoid the version 3.4.6; Upgrade pragma_systems secureshell to a higher version than 2.0,and avoid the version 2.0; Upgrade putty putty to a higher version than 0.48,0.49,0.53,and avoid the version 0.48,0.49,0.53; Upgrade winscp winscp to a higher version than 2.0.0,and avoid the version 2.0.0