Unscored severity · published Oct 4, 2002
CVE-2002-1024
Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption) via a large packet that was designed to exploit the SSH…
–
CVSS
3.3%
EPSS
No
On KEV
Description
Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption) via a large packet that was designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144).
Exploitation
Is it being used?
Exploit prediction (EPSS)3.3% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Catos · Cisco
5.3(1)csx; 5.3(1a)csx; 5.3(2)csx; 5.3(3)csx; 5.3(4)csx; 5.3(5)csx; +26 more · source: NVD
CC
Css11000 Content Services Switch · Cisco
All versions, or not specified · source: NVD
IO
Ios · Cisco
12.0s; 12.0sp; 12.0st; 12.0xb; 12.0xm; 12.0xv; +34 more · source: NVD
PF
Pix Firewall Software · Cisco
5.2; 5.3; 6.0; 6.1; 6.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1024
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1024
www.cisco.com
http://www.cisco.com/warp/public/707/SSH-scanning.shtml
Patch
http://www.iss.net/security_center/static/9437.php
US Government Resource
http://www.kb.cert.org/vuls/id/290140
Patch
http://www.securityfocus.com/bid/5114
More from Catos
–
CVE-2008-4963
Unspecified vulnerability in the VLAN Trunking Protocol (VTP) implementation on Cisco IOS and CatOS, when the VTP operating mode is not transparent, allows remote attackers to…
–
CVE-2007-5651
Unspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 Wireless Bridges (Wireless EAP…
–
CVE-2007-5134
Cisco Catalyst 6500 and Cisco 7600 series devices use 127/8 IP addresses for Ethernet Out-of-Band Channel (EOBC) internal communication, which might allow remote attackers to send…
–
CVE-2006-4775
The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers to cause a denial of service by sending a VTP update with a revision value of…
–
CVE-2004-1775
Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device…