← Back

CVE-2002-0083

nvd nist
Published: Mar 15, 2002Modified: Apr 16, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.

Affected (38)

Show all products
Conectiva: Linux · Immunix: Immunix · Mandrakesoft: Mandrake Single Network Firewall, Mandrake Linux, Mandrake Linux Corporate Server · Openbsd: Openssh · Openpkg: Openpkg · Engardelinux: Secure Linux · Redhat: Linux · Suse: Suse Linux · Trustix: Secure Linux
Conectiva
1 product
Linux
Immunix
1 product
Immunix
Mandrakesoft
3 products
Mandrake Single Network Firewall
Mandrake Linux
Mandrake Linux Corporate Server
Openbsd
1 product
Openssh
Openpkg
1 product
Openpkg
Engardelinux
1 product
Secure Linux
Redhat
1 product
Linux
Suse
1 product
Suse Linux
Trustix
1 product
Secure Linux
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Conectiva
Linux
Version 5.0
Linux
Version 5.1
Linux
Version 6.0
Linux
Version 7.0
Linux
Version ecommerce
Linux
Version graficas
Immunix
Version 7.0
Mandrake Single Network Firewall
Version 7.2
Openssh
From 2.0 to 3.1
Openpkg
Version 1.0
Configuration B
28 vulnerable
Vulnerable SoftwareAffected Versions
Secure Linux
Version 1.0.1
Mandrakesoft
Mandrake Linux
Version 7.1
Mandrake Linux
Version 7.2
Mandrake Linux
Version 8.0
Mandrake Linux
Version 8.0
Mandrake Linux
Version 8.1
Mandrake Linux Corporate Server
Version 1.0.1
Redhat
Linux
Version 7.0
Linux
Version 7.1
Linux
Version 7.2
Suse
Suse Linux
Version 6.4
Suse Linux
Version 6.4
Suse Linux
Version 6.4 alpha
Suse Linux
Version 7.0
Suse Linux
Version 7.0
Suse Linux
Version 7.0
Suse Linux
Version 7.0 alpha
Suse Linux
Version 7.1
Suse Linux
Version 7.1
Suse Linux
Version 7.1
Suse Linux
Version 7.1 alpha
Suse Linux
Version 7.2
Suse Linux
Version 7.3
Suse Linux
Version 7.3
Suse Linux
Version 7.3
Trustix
Secure Linux
Version 1.1
Secure Linux
Version 1.2
Secure Linux
Version 1.5

Related CWEs

CWE-193
Off-by-one Error
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

References (46)

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:13.openssh.asc (unsafe URL)
Source: cve@mitre.org
Broken Link
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-004.txt.asc (unsafe URL)
Source: cve@mitre.org
Broken Link
ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.10/CSSA-2002-SCO.10.txt (unsafe URL)
Source: cve@mitre.org
Broken Link
ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.11/CSSA-2002-SCO.11.txt (unsafe URL)
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Mailing List
Source: cve@mitre.org
Mailing List
Source: cve@mitre.org
Mailing List
Source: cve@mitre.org
Mailing ListPatch
Source: cve@mitre.org
Broken LinkThird Party AdvisoryVDB Entry
Source: cve@mitre.org
Broken LinkThird Party AdvisoryVDB Entry
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken LinkVendor Advisory
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken LinkPatchVendor Advisory
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken LinkThird Party AdvisoryVDB Entry
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:13.openssh.asc (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-004.txt.asc (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.10/CSSA-2002-SCO.10.txt (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.11/CSSA-2002-SCO.11.txt (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry

Timeline

No history available yet.