OpenSSH contains a one-off overflow of an array in the channel handling code

🗓️ 07 Mar 2002 00:00:00Reported by CERTType

cert

cert🔗 www.kb.cert.org👁 37 Views

OpenSSH versions 2.0-3.0.2 vulnerable to array overflow; upgrade to 3.1 for protection.

Reporter	Title	Published	Views	Family All 86
Tenable Nessus	OpenSSH < 3.0.1 Multiple Vulnerabilities	20 Aug 200400:00	–	nessus
Tenable Nessus	OpenSSH < 3.2.1 AFS/Kerberos Ticket/Token Passing Overflow	20 Aug 200400:00	–	nessus
Tenable Nessus	OpenSSH < 3.1 Channel Code Off by One Privilege Escalation	20 Aug 200400:00	–	nessus
Tenable Nessus	Debian DSA-119-1 : ssh -- local root exploit, remote client exploit	29 Sep 200400:00	–	nessus
Tenable Nessus	Mandrake Linux Security Advisory : openssh (MDKSA-2002:019)	31 Jul 200400:00	–	nessus
Tenable Nessus	OpenSSH < 3.1 Channel Code Off by One Remote Privilege Escalation	7 Mar 200200:00	–	nessus
Tenable Nessus	SunSSH < 1.1.1 / 1.3 CBC Plaintext Disclosure	29 Aug 201100:00	–	nessus
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

Source	Link
openbsd	www.openbsd.org/advisories/ssh_channelalloc.txt
pine	www.pine.nl/advisories/pine-cert-20020301.txt
online	www.online.securityfocus.com/bid/4241

02 Apr 2002 16:23Current

9.4High risk

Vulners AI Score9.4

CVSS 3.19.8

CVSS 210

EPSS0.14804

openssh array overflow vulnerable versions server authentication arbitrary code execution upgrade solution.