CVE-2002-1645: SSH SSH2

High severity, CVSS 10.0. EPSS: 7.9% chance of exploitation in the next 30 days.

Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote attackers to execute arbitrary code via a long URL.

Affected products

• SSH SSH2: version 3.1 only; version 3.1.1 only; version 3.1.2 only; version 3.1.3 only; version 3.1.4 only; version 3.2 only

Published 2002-11-25. Last modified 2026-06-16.