vulnwire
9.8crit

CVE-2002-0083in critical feed1 exploit

Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.

Published 24 y ago · modified 4 mo ago · JSON

CVSS
9.8
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
14.7%
percentile 97%
Public exploits
1
Exploit-DB

Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.

Exploit prediction (EPSS)

14.69% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

Exploits and detections

  • EDB-21314 OpenSSH 2.x/3.0.1/3.0.2 - Channel Code Off-by-One · remote · 2002-03-07

CVSS scores

Assigned byVersionScoreVector
NVD3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness

References

  • archives.neohapsis.com /archives/bugtraq/2002-03/0108.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • osvdb.org /730 · vdb-entry, x_refsource_OSVDB, x_transferred
  • securityfocus.com /bid/4241 · vdb-entry, x_refsource_BID, x_transferred
  • marc.info /?l=bugtraq&m=101561384821761&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • online.securityfocus.com /advisories/3960 · vendor-advisory, x_refsource_HP, x_transferred
  • debian.org /security/2002/dsa-119 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • novell.com /linux/security/advisories/2002_009_openssh_txt.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • calderasystems.com /support/security/advisories/CSSA-2002-012.0.txt · vendor-advisory, x_refsource_CALDERA, x_transferred
  • marc.info /?l=bugtraq&m=101586991827622&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • linuxsecurity.com /advisories/other_advisory-1937.html · vendor-advisory, x_refsource_ENGARDE, x_transferred
  • distro.conectiva.com.br /atualizacoes/?id=a&anuncio=000467 · vendor-advisory, x_refsource_CONECTIVA, x_transferred
  • marc.info /?l=bugtraq&m=101553908201861&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • marc.info /?l=bugtraq&m=101552065005254&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • linux-mandrake.com /en/security/2002/MDKSA-2002-019.php · vendor-advisory, x_refsource_MANDRAKE, x_transferred
  • redhat.com /support/errata/RHSA-2002-043.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • iss.net /security_center/static/8383.php · vdb-entry, x_refsource_XF, x_transferred
  • openbsd.org /advisories/ssh_channelalloc.txt · x_refsource_CONFIRM, x_transferred
  • online.securityfocus.com /archive/1/264657 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • archives.neohapsis.com /archives/vulnwatch/2002-q1/0060.html · mailing-list, x_refsource_VULNWATCH, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.