CVE-2002-2379

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-12-31 · updated 2026-06-16
Weakness: CWE-310

Description

Cisco AS5350 IOS 12.2(11)T with access control lists (ACLs) applied and possibly with ssh running allows remote attackers to cause a denial of service (crash) via a port scan, possibly due to an ssh bug. NOTE: this issue could not be reproduced by the vendor

Affected products

Cisco As5350: 12.2(11t)

References

http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00397.html
http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00411.html
http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00413.html
http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00420.html
http://www.cisco.com/en/US/products/hw/univgate/ps501/products_security_notice09186a008024dba2.html
http://www.iss.net/security_center/static/10522.php
http://www.securityfocus.com/bid/6059
http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00397.html
http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00411.html
http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00413.html
http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00420.html
http://www.cisco.com/en/US/products/hw/univgate/ps501/products_security_notice09186a008024dba2.html

Get alerted when CVE-2002-2379 or the next vulnerability affects your stack