CVE-2002-0639

Description (CNA)

Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://www.debian.org/security/2002/dsa-134
• http://www.iss.net/security_center/static/9169.php
• http://archives.neohapsis.com/archives/bugtraq/2002-06/0335.html
• http://marc.info/?l=bugtraq&m=102514371522793&w=2
• http://www.osvdb.org/6245
• http://www.cert.org/advisories/CA-2002-18.html
• http://marc.info/?l=bugtraq&m=102521542826833&w=2
• http://www.securityfocus.com/bid/5093
• http://www.linuxsecurity.com/advisories/other_advisory-2177.html
• http://www.kb.cert.org/vuls/id/369347
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000502
• http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0206-195
• http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:040
• http://marc.info/?l=bugtraq&m=102514631524575&w=2
• https://web.archive.org/web/20080622172542/www.iss.net/threats/advise123.html
• https://twitter.com/RooneyMcNibNug/status/1152332585349111810

ADP enrichment