CVE-2002-1646 SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication schemes (e.g. password) than configured for....
HighCVSS 7.5
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication schemes (e.g. password) than configured for the server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ssh secure shell for servers | = 3.0 | No fix listed |
| ssh secure shell for servers | = 3.0.1 | No fix listed |
| ssh secure shell for servers | = 3.1 | No fix listed |
| ssh secure shell for servers | = 3.1.1 | No fix listed |
References
- 20020523 [Fwd: Updated version of SSH Secure Shell available] mailing-list patch
- M-081 government-resource third-party-advisory
- VU#341187 third-party-advisory us-government-resource
- 4810 patch vdb-entry
- www.ssh.com
- www.ssh.com patch
- ssh-allowedauthentications-bypass-auth(9163) vdb-entry