CVE-2002-0640 Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using...
HighCVSS 10.0
EPSS 28.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenBSD openssh | = 1.2.2 | No fix listed |
| OpenBSD openssh | = 1.2.3 | No fix listed |
| OpenBSD openssh | = 2.1 | No fix listed |
| OpenBSD openssh | = 2.1.1 | No fix listed |
| OpenBSD openssh | = 2.2 | No fix listed |
| OpenBSD openssh | = 2.3 | No fix listed |
| OpenBSD openssh | = 2.5 | No fix listed |
| OpenBSD openssh | = 2.5.1 | No fix listed |
| OpenBSD openssh | = 2.5.2 | No fix listed |
| OpenBSD openssh | = 2.9 | No fix listed |
| OpenBSD openssh | = 2.9.9 | No fix listed |
| OpenBSD openssh | = 2.9p1 | No fix listed |
| OpenBSD openssh | = 2.9p2 | No fix listed |
| OpenBSD openssh | = 3.0 | No fix listed |
| OpenBSD openssh | = 3.0.1 | No fix listed |
| OpenBSD openssh | = 3.0.1p1 | No fix listed |
| OpenBSD openssh | = 3.0.2 | No fix listed |
| OpenBSD openssh | = 3.0.2p1 | No fix listed |
| OpenBSD openssh | = 3.0p1 | No fix listed |
| OpenBSD openssh | = 3.1 | No fix listed |
| OpenBSD openssh | = 3.1p1 | No fix listed |
| OpenBSD openssh | = 3.2 | No fix listed |
| OpenBSD openssh | = 3.2.2p1 | No fix listed |
| OpenBSD openssh | = 3.2.3p1 | No fix listed |
| OpenBSD openssh | = 3.3 | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenBSD openssh | = 3.3p1 | No fix listed |
| debian/openssh(Debian:12) | < 1:3.4 | 1:3.4 |
| debian/openssh(Debian:13) | < 1:3.4 | 1:3.4 |
| debian/openssh(Debian:14) | < 1:3.4 | 1:3.4 |
References
- CLA-2002:502 vendor-advisory
- 20020626 OpenSSH Security Advisory (adv.iss) mailing-list
- 20020626 Revised OpenSSH Security Advisory (adv.iss) mailing-list
- 20020627 How to reproduce OpenSSH Overflow. mailing-list
- 20020628 Sun statement on the OpenSSH Remote Challenge Vulnerability mailing-list
- CA-2002-18 third-party-advisory us-government-resource
- DSA-134 vendor-advisory
- VU#369347 third-party-advisory us-government-resource
- ESA-20020702-016 vendor-advisory
- MDKSA-2002:040 vendor-advisory
- SuSE-SA:2002:024 vendor-advisory
- [oss-security] 20240701 CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems mailing-list
- 839 vdb-entry
- RHSA-2002:127 vendor-advisory
- RHSA-2002:131 vendor-advisory
- 5093 vdb-entry
- HPSBUX0206-195 vendor-advisory
- Debian Security Tracker CVE-2002-0640 vendor-advisory