Detections
Analytics
SSH Multiple Vulnerabilities
critical Nessus Network Monitor Plugin ID 1974
Synopsis
The remote host is vulnerable to multiple attack vectors.Description
The remote SSH server (or client) is vulnerable to various vulnerabilities that may allow an attacker to obtain a root shell on this host.Solution
Upgrade or patch according to vendor recommendations.See Also
http://www.cert.org/advisories/CA-2002-36.html
http://www.rapid7.com/advisories/R7-0009.txt
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html
Plugin Details
Severity: Critical
ID: 1974
Family: SSH
Published: 8/20/2004
Updated: 3/6/2019
Nessus ID: 11195
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Exploitable With
Metasploit (PuTTy.exe <= v0.53 Buffer Overflow)
Reference Information
CVE: CVE-2002-1357, CVE-2002-1358, CVE-2002-1359, CVE-2002-1360