Multiple Vendor SSH2 Implementation Empty Elements / Multiple Separator Vulnerabilities

Threat level definition

Multiple Vendor SSH2 Implementation Empty Elements / Multiple Separator Vulnerabilities

References:

CERT Advisory CA-2002-36 Multiple Vulnerabilities in SSH Implementations (CERT/CC)
Cisco Security Advisory: SSH Malformed Packet Vulnerabilities (Cisco Systems)
F-Secure Homepage (F-Secure)
SSH Communications Homepage (SSH Communications)
Re: [IPS] PUTTY SSH-Client Exploit (Owen Dunn )

Privacy Statement
Copyright 2008, SecurityFocus