vulnwire
10.0crit

CVE-2002-0640in critical feed2 exploits

Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses d…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
28.2%
percentile 98%
Public exploits
2
Exploit-DB

Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt).

Exploit prediction (EPSS)

28.16% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

Exploits and detections

  • EDB-21579 OpenSSH 3.x - Challenge-Response Buffer Overflow (2) · remote · 2002-06-24
  • EDB-21578 OpenSSH 3.x - Challenge-Response Buffer Overflow (1) · remote · 2002-06-24

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

References

  • debian.org /security/2002/dsa-134 · vendor-advisory, x_transferred
  • redhat.com /support/errata/RHSA-2002-127.html · vendor-advisory, x_transferred
  • marc.info /?l=bugtraq&m=102514371522793&w=2 · mailing-list, x_transferred
  • novell.com /linux/security/advisories/2002_024_openssh_txt.html · vendor-advisory, x_transferred
  • marc.info /?l=bugtraq&m=102532054613894&w=2 · mailing-list, x_transferred
  • osvdb.org /839 · vdb-entry, x_transferred
  • cert.org /advisories/CA-2002-18.html · third-party-advisory, x_transferred
  • marc.info /?l=bugtraq&m=102521542826833&w=2 · mailing-list, x_transferred
  • redhat.com /support/errata/RHSA-2002-131.html · vendor-advisory, x_transferred
  • securityfocus.com /bid/5093 · vdb-entry, x_transferred
  • linuxsecurity.com /advisories/other_advisory-2177.html · vendor-advisory, x_transferred
  • kb.cert.org /vuls/id/369347 · third-party-advisory, x_transferred
  • distro.conectiva.com.br /atualizacoes/?id=a&anuncio=000502 · vendor-advisory, x_transferred
  • www1.itrc.hp.com /service/cki/docDisplay.do?docId=HPSBUX0206-195 · vendor-advisory, x_transferred
  • mandrakesoft.com /security/advisories?name=MDKSA-2002:040 · vendor-advisory, x_transferred
  • marc.info /?l=bugtraq&m=102514631524575&w=2 · mailing-list, x_transferred
  • openwall.com /lists/oss-security/2024/07/01/3 · mailing-list, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.