CVE-2002-0640

Published: Jul 3, 2002Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt).

Affected (26)

Products: Openbsd: Openssh

1 product

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openssh	Version 1.2.2
Openbsd Openssh	Version 1.2.3
Openbsd Openssh	Version 2.1.1
Openbsd Openssh	Version 2.1
Openbsd Openssh	Version 2.2
Openbsd Openssh	Version 2.3
Openbsd Openssh	Version 2.5.1
Openbsd Openssh	Version 2.5.2
Openbsd Openssh	Version 2.5
Openbsd Openssh	Version 2.9.9
Openbsd Openssh	Version 2.9
Openbsd Openssh	Version 2.9p1
Openbsd Openssh	Version 2.9p2
Openbsd Openssh	Version 3.0.1
Openbsd Openssh	Version 3.0.1p1
Openbsd Openssh	Version 3.0.2
Openbsd Openssh	Version 3.0.2p1
Openbsd Openssh	Version 3.0
Openbsd Openssh	Version 3.0p1
Openbsd Openssh	Version 3.1
Openbsd Openssh	Version 3.1p1
Openbsd Openssh	Version 3.2.2p1
Openbsd Openssh	Version 3.2.3p1
Openbsd Openssh	Version 3.2
Openbsd Openssh	Version 3.3
Openbsd Openssh	Version 3.3p1

References (36)

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-030.0.txt (unsafe URL)

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000502

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=102514371522793&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=102514631524575&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=102521542826833&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=102532054613894&w=2

Source: cve@mitre.org

http://www.cert.org/advisories/CA-2002-18.html

Source: cve@mitre.org

US Government Resource

http://www.debian.org/security/2002/dsa-134

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/369347

Source: cve@mitre.org

US Government Resource

http://www.linuxsecurity.com/advisories/other_advisory-2177.html

Source: cve@mitre.org

http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:040

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2002_024_openssh_txt.html

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2024/07/01/3

Source: cve@mitre.org

http://www.osvdb.org/839

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2002-127.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2002-131.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/5093

Source: cve@mitre.org

http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0206-195

Source: cve@mitre.org

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-030.0.txt (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000502

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=102514371522793&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=102514631524575&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=102521542826833&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=102532054613894&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.cert.org/advisories/CA-2002-18.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.debian.org/security/2002/dsa-134

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/369347

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.linuxsecurity.com/advisories/other_advisory-2177.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:040

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2002_024_openssh_txt.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2024/07/01/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/839

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2002-127.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2002-131.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/5093

Source: af854a3a-2127-422b-91ae-364da2661108

http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0206-195

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.