Lucene search

MitreCVE-2002-0639

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-0639

2003-04-0205:00:00

CWE-190

mitre

web.nvd.nist.gov

219

cve-2002-0639

integer overflow

sshd

openssh

remote attackers

arbitrary code

challenge response authentication

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.287

Percentile

96.9%

JSON

Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication.

Affected configurations

Nvd

Node

openbsdopensshRange2.9.9–3.3

VendorProductVersionCPE
openbsdopenssh*cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openbsd	openssh	*	cpe:2.3:a:openbsd:openssh::::::::

References

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-030.0.txt

archives.neohapsis.com/archives/bugtraq/2002-06/0335.html

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000502

marc.info/?l=bugtraq&m=102514371522793&w=2

marc.info/?l=bugtraq&m=102514631524575&w=2

marc.info/?l=bugtraq&m=102521542826833&w=2

www.cert.org/advisories/CA-2002-18.html

www.debian.org/security/2002/dsa-134

www.iss.net/security_center/static/9169.php

www.kb.cert.org/vuls/id/369347

www.linuxsecurity.com/advisories/other_advisory-2177.html

www.mandrakesoft.com/security/advisories?name=MDKSA-2002:040

www.osvdb.org/6245

www.securityfocus.com/bid/5093

www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0206-195

twitter.com/RooneyMcNibNug/status/1152332585349111810

web.archive.org/web/20080622172542/www.iss.net/threats/advise123.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.287

Percentile

96.9%

JSON

Related for CVE-2002-0639