CVE-2002-0640

Published Jul 3, 2002

Last updated 4 months ago

Overview

Description: Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt).
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 10
Impact score: 10
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:1.2.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B6E307F1-C765-409C-835C-133026A5179C"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CA997F5E-29FE-454A-9006-001D732CD4B1"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EED5E506-9D2B-4CAF-8455-B9BE7696E49C"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:2.1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EE7CB94E-0479-4939-86F6-0B4BEDE2E739"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:2.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "78135400-BA1A-42AA-BE17-5588442BCF11"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:2.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "78F2EDC0-3189-4523-882B-9188C852F793"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:2.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E2991C07-5486-4590-A74E-46A379DD3339"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:2.5.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4EB9BE06-0A36-4853-ADF4-9C1A1854278A"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:2.5.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8FC57F38-6545-497B-B6DA-FCAF51755988"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:2.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EC30FD61-10DA-4C9B-BCE8-AD75DCEB40BC"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:2.9.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EC1DF4CE-E71C-4C10-9F82-B9ECDC94933F"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:2.9p1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0238F009-4BBA-4E6B-9E2A-6045BA9BBE9C"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:2.9p2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4B235167-9554-4431-88C5-9472DD36FCDE"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "580008AC-2667-4708-8F7E-D70416A460EE"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E05D8E86-EC01-4589-B372-4DEB7845C81F"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:3.0.1p1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "764AD252-CA2F-4A87-BCAA-7747E8C410E0"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CFFAA075-4277-4FD8-8A5A-867EEE1BA2F4"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:3.0.2p1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "269BB9F7-55E5-4CB3-8429-C37C7132799F"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C6E6F639-31A0-4026-B6D4-51BA79FB1D20"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0211BCE3-0DED-40BA-8A21-1A97B91F71C7"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:3.1p1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B4EE9E4B-CABC-4EA2-9075-CC23CEB1B0A3"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5AD7BB30-AC79-4153-852C-1053DCF4DE53"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:3.2.2p1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9E188C66-C8F1-4C13-AAFF-7C83B2A884B8"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:3.2.3p1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9039BE91-AF0A-41E7-8F9F-15375890E120"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:3.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "08BCB2EA-DF9D-4853-805B-29FA6274E2B7"
          },
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:3.3p1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0F93417F-2498-4576-9F5D-B59F77D39669"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References