10

CVE-2002-0640

Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt).

Data is provided by the National Vulnerability Database (NVD)
Openbsd ≫ Openssh Version1.2.2
Openbsd ≫ Openssh Version1.2.3
Openbsd ≫ Openssh Version2.1
Openbsd ≫ Openssh Version2.1.1
Openbsd ≫ Openssh Version2.2
Openbsd ≫ Openssh Version2.3
Openbsd ≫ Openssh Version2.5
Openbsd ≫ Openssh Version2.5.1
Openbsd ≫ Openssh Version2.5.2
Openbsd ≫ Openssh Version2.9
Openbsd ≫ Openssh Version2.9.9
Openbsd ≫ Openssh Version2.9p1
Openbsd ≫ Openssh Version2.9p2
Openbsd ≫ Openssh Version3.0
Openbsd ≫ Openssh Version3.0.1
Openbsd ≫ Openssh Version3.0.1p1
Openbsd ≫ Openssh Version3.0.2
Openbsd ≫ Openssh Version3.0.2p1
Openbsd ≫ Openssh Version3.0p1
Openbsd ≫ Openssh Version3.1
Openbsd ≫ Openssh Version3.1p1
Openbsd ≫ Openssh Version3.2
Openbsd ≫ Openssh Version3.2.2p1
Openbsd ≫ Openssh Version3.2.3p1
Openbsd ≫ Openssh Version3.3
Openbsd ≫ Openssh Version3.3p1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 64.84% 0.984
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C