CVE-2002-0640
- State
- Published
- Severity
- Not scored
- Published
- Apr 2, 2003
- Updated
- Aug 8, 2024
- Reserved
- Jun 28, 2002
Description
Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt).
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- DSA-134vendor-advisory
- RHSA-2002:127vendor-advisory
- 20020626 OpenSSH Security Advisory (adv.iss)mailing-list
- SuSE-SA:2002:024vendor-advisory
- 20020628 Sun statement on the OpenSSH Remote Challenge Vulnerabilitymailing-list
- 839vdb-entry
- CA-2002-18third-party-advisory
- 20020627 How to reproduce OpenSSH Overflow.mailing-list
- RHSA-2002:131vendor-advisory
- 5093vdb-entry
- ESA-20020702-016vendor-advisory
- VU#369347third-party-advisory
- CLA-2002:502vendor-advisory
- HPSBUX0206-195vendor-advisory
- MDKSA-2002:040vendor-advisory
- 20020626 Revised OpenSSH Security Advisory (adv.iss)mailing-list
- [oss-security] 20240701 CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systemsmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.