Lucene search

MitreCVE-2002-0640

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-0640

2003-04-0205:00:00

mitre

web.nvd.nist.gov

596

cve-2002-0640

buffer overflow

openssh

remote code execution

vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

9.8

Confidence

High

EPSS

0.557

Percentile

97.7%

JSON

Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt).

Affected configurations

Nvd

Node

openbsdopensshMatch1.2.2

openbsdopensshMatch1.2.3

openbsdopensshMatch2.1

openbsdopensshMatch2.1.1

openbsdopensshMatch2.2

openbsdopensshMatch2.3

openbsdopensshMatch2.5

openbsdopensshMatch2.5.1

openbsdopensshMatch2.5.2

openbsdopensshMatch2.9

openbsdopensshMatch2.9.9

openbsdopensshMatch2.9p1

openbsdopensshMatch2.9p2

openbsdopensshMatch3.0

openbsdopensshMatch3.0.1

openbsdopensshMatch3.0.1p1

openbsdopensshMatch3.0.2

openbsdopensshMatch3.0.2p1

openbsdopensshMatch3.0p1

openbsdopensshMatch3.1

openbsdopensshMatch3.1p1

openbsdopensshMatch3.2

openbsdopensshMatch3.2.2p1

openbsdopensshMatch3.2.3p1

openbsdopensshMatch3.3

openbsdopensshMatch3.3p1

VendorProductVersionCPE
openbsdopenssh1.2.2cpe:2.3:a:openbsd:openssh:1.2.2:*:*:*:*:*:*:*
openbsdopenssh1.2.3cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:*
openbsdopenssh2.1cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*
openbsdopenssh2.1.1cpe:2.3:a:openbsd:openssh:2.1.1:*:*:*:*:*:*:*
openbsdopenssh2.2cpe:2.3:a:openbsd:openssh:2.2:*:*:*:*:*:*:*
openbsdopenssh2.3cpe:2.3:a:openbsd:openssh:2.3:*:*:*:*:*:*:*
openbsdopenssh2.5cpe:2.3:a:openbsd:openssh:2.5:*:*:*:*:*:*:*
openbsdopenssh2.5.1cpe:2.3:a:openbsd:openssh:2.5.1:*:*:*:*:*:*:*
openbsdopenssh2.5.2cpe:2.3:a:openbsd:openssh:2.5.2:*:*:*:*:*:*:*
openbsdopenssh2.9cpe:2.3:a:openbsd:openssh:2.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openbsd	openssh	1.2.2	cpe:2.3:a:openbsd:openssh:1.2.2:::::::*
openbsd	openssh	1.2.3	cpe:2.3:a:openbsd:openssh:1.2.3:::::::*
openbsd	openssh	2.1	cpe:2.3:a:openbsd:openssh:2.1:::::::*
openbsd	openssh	2.1.1	cpe:2.3:a:openbsd:openssh:2.1.1:::::::*
openbsd	openssh	2.2	cpe:2.3:a:openbsd:openssh:2.2:::::::*
openbsd	openssh	2.3	cpe:2.3:a:openbsd:openssh:2.3:::::::*
openbsd	openssh	2.5	cpe:2.3:a:openbsd:openssh:2.5:::::::*
openbsd	openssh	2.5.1	cpe:2.3:a:openbsd:openssh:2.5.1:::::::*
openbsd	openssh	2.5.2	cpe:2.3:a:openbsd:openssh:2.5.2:::::::*
openbsd	openssh	2.9	cpe:2.3:a:openbsd:openssh:2.9:::::::*