CVE-2002-0640
CRITICAL
10.0
CVSS Severity Score
Vulnerability Description
Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt).
Affected Platforms (CPE)
📦
Openbsd
Openssh
= 1.2.2📦
Openbsd
Openssh
= 1.2.3📦
Openbsd
Openssh
= 2.1📦
Openbsd
Openssh
= 2.1.1📦
Openbsd
Openssh
= 2.2📦
Openbsd
Openssh
= 2.3📦
Openbsd
Openssh
= 2.5📦
Openbsd
Openssh
= 2.5.1📦
Openbsd
Openssh
= 2.5.2📦
Openbsd
Openssh
= 2.9📦
Openbsd
Openssh
= 2.9.9📦
Openbsd
Openssh
= 2.9p1📦
Openbsd
Openssh
= 2.9p2📦
Openbsd
Openssh
= 3.0📦
Openbsd
Openssh
= 3.0.1📦
Openbsd
Openssh
= 3.0.1p1📦
Openbsd
Openssh
= 3.0.2📦
Openbsd
Openssh
= 3.0.2p1📦
Openbsd
Openssh
= 3.0p1📦
Openbsd
Openssh
= 3.1📦
Openbsd
Openssh
= 3.1p1📦
Openbsd
Openssh
= 3.2📦
Openbsd
Openssh
= 3.2.2p1📦
Openbsd
Openssh
= 3.2.3p1📦
Openbsd
Openssh
= 3.3📦
Openbsd