CVE-2002-0460

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of incomplete connections that are not properly terminated, which are not properly freed by SSHd.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0068.html
http://online.securityfocus.com/archive/1/262681Vendor Advisory
http://www.iss.net/security_center/static/8470.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4300Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0068.html
http://online.securityfocus.com/archive/1/262681Vendor Advisory
http://www.iss.net/security_center/static/8470.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4300Exploit, Patch, Vendor Advisory

Timeline

Published: Aug 12, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-04615.0Internet Explorer 5.01 through 6 allows remote attackers to cause a denial of service (application crash) via Javascript in a web page that CVE-2002-04626.4bigsam_guestbook.php for Big Sam (Built-In Guestbook Stand-Alone Module) 1.1.08 and earlier allows remote attackers to cause a denial of ser CVE-2002-04635.0home.php in ARSC (Really Simple Chat) 1.0.1 and earlier allows remote attackers to determine the full pathname of the web server via an inva CVE-2002-04646.4Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files and dir CVE-2002-046510.0Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arb CVE-2002-04665.0Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathname in the filepath ar CVE-2002-046710.0Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote attackers to execute arbitrary code via (1) addre CVE-2002-04684.6Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long com CVE-2002-04697.2Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is installed setuid-root, "l CVE-2002-04707.2PHPNetToolpack 0.1 relies on its environment's PATH to find and execute the traceroute program, which could allow local users to gain privil CVE-2002-047110.0PHPNetToolpack 0.1 allows remote attackers to execute arbitrary code via shell metacharacters in the a_query variable.CVE-2002-04725.0MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remo