CVE-2002-0083 Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.
CriticalCVSS 9.8
EPSS 14.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| immunix | = 7.0 | No fix listed |
| mandrakesoft mandrake single network firewall | = 7.2 | No fix listed |
| OpenBSD openssh | >= 2.0, < 3.1 | 3.1 |
| openpkg | = 1.0 | No fix listed |
| conectiva linux | = 5.0 | No fix listed |
| conectiva linux | = 5.1 | No fix listed |
| conectiva linux | = 6.0 | No fix listed |
| conectiva linux | = 7.0 | No fix listed |
| conectiva linux | = ecommerce | No fix listed |
| conectiva linux | = graficas | No fix listed |
| engardelinux secure linux | = 1.0.1 | No fix listed |
| mandrakesoft mandrake linux | = 7.1 | No fix listed |
| mandrakesoft mandrake linux | = 7.2 | No fix listed |
| mandrakesoft mandrake linux | = 8.0 | No fix listed |
| mandrakesoft mandrake linux | = 8.1 | No fix listed |
| mandrakesoft mandrake linux corporate server | = 1.0.1 | No fix listed |
| redhat linux | = 7.0 | No fix listed |
| redhat linux | = 7.1 | No fix listed |
| redhat linux | = 7.2 | No fix listed |
| suse linux | = 6.4 | No fix listed |
| suse linux | = 6.4-alpha | No fix listed |
| suse linux | = 7.0 | No fix listed |
| suse linux | = 7.0-alpha | No fix listed |
| suse linux | = 7.1 | No fix listed |
| suse linux | = 7.1-alpha | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| suse linux | = 7.2 | No fix listed |
| suse linux | = 7.3 | No fix listed |
| trustix secure linux | = 1.1 | No fix listed |
| trustix secure linux | = 1.2 | No fix listed |
| trustix secure linux | = 1.5 | No fix listed |
References
- 20020311 TSLSA-2002-0039 - openssh broken-link mailing-list
- 20020307 [VulnWatch] [PINE-CERT-20020301] OpenSSH off-by-one broken-link mailing-list
- CLA-2002:467 broken-link vendor-advisory
- 20020307 [PINE-CERT-20020301] OpenSSH off-by-one mailing-list
- 20020307 OpenSSH Security Advisory (adv.channelalloc) mailing-list
- 20020308 [OpenPKG-SA-2002.002] OpenPKG Security Advisory (openssh) mailing-list
- 20020310 OpenSSH 2.9.9p2 packages for Immunix 6.2 with latest fix mailing-list patch
- HPSBTL0203-029 broken-link third-party-advisory vdb-entry vendor-advisory
- 20020328 OpenSSH channel_lookup() off by one exploit broken-link mailing-list third-party-advisory vdb-entry
- CSSA-2002-012.0 broken-link vendor-advisory
- DSA-119 broken-link vendor-advisory
- openssh-channel-error(8383) broken-link vdb-entry
- MDKSA-2002:019 broken-link vendor-advisory
- ESA-20020307-007 broken-link patch vendor-advisory
- SuSE-SA:2002:009 broken-link vendor-advisory
- www.openbsd.org vendor-advisory
- 730 broken-link vdb-entry
- RHSA-2002:043 broken-link vendor-advisory
- 4241 broken-link third-party-advisory vdb-entry