vulnwire
9.8crit

CVE-2002-0639in critical feed

Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentic…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
9.8
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
18.3%
percentile 97%
Public exploits
0
none known

Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication.

Exploit prediction (EPSS)

18.29% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-190 Integer Overflow or Wraparound

References

  • debian.org /security/2002/dsa-134 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • iss.net /security_center/static/9169.php · vdb-entry, x_refsource_XF, x_transferred
  • archives.neohapsis.com /archives/bugtraq/2002-06/0335.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • marc.info /?l=bugtraq&m=102514371522793&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • osvdb.org /6245 · vdb-entry, x_refsource_OSVDB, x_transferred
  • cert.org /advisories/CA-2002-18.html · third-party-advisory, x_refsource_CERT, x_transferred
  • marc.info /?l=bugtraq&m=102521542826833&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/5093 · vdb-entry, x_refsource_BID, x_transferred
  • linuxsecurity.com /advisories/other_advisory-2177.html · vendor-advisory, x_refsource_ENGARDE, x_transferred
  • kb.cert.org /vuls/id/369347 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • distro.conectiva.com.br /atualizacoes/?id=a&anuncio=000502 · vendor-advisory, x_refsource_CONECTIVA, x_transferred
  • www1.itrc.hp.com /service/cki/docDisplay.do?docId=HPSBUX0206-195 · vendor-advisory, x_refsource_HP, x_transferred
  • mandrakesoft.com /security/advisories?name=MDKSA-2002:040 · vendor-advisory, x_refsource_MANDRAKE, x_transferred
  • marc.info /?l=bugtraq&m=102514631524575&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • web.archive.org /web/20080622172542/www.iss.net/threats/advise123.html · third-party-advisory, x_refsource_ISS, x_transferred
  • twitter.com /RooneyMcNibNug/status/1152332585349111810 · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.