Описание
Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication.
Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2002-0639
- https://twitter.com/RooneyMcNibNug/status/1152332585349111810
- https://web.archive.org/web/20080622172542/www.iss.net/threats/advise123.html
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0335.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000502
- http://marc.info/?l=bugtraq&m=102514371522793&w=2
- http://marc.info/?l=bugtraq&m=102514631524575&w=2
- http://marc.info/?l=bugtraq&m=102521542826833&w=2
- http://www.cert.org/advisories/CA-2002-18.html
- http://www.debian.org/security/2002/dsa-134
- http://www.iss.net/security_center/static/9169.php
- http://www.kb.cert.org/vuls/id/369347
- http://www.linuxsecurity.com/advisories/other_advisory-2177.html
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:040
- http://www.osvdb.org/6245
- http://www.securityfocus.com/bid/5093
- http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0206-195
EPSS
CVE ID
Связанные уязвимости
Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication.
Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote at ...
EPSS