CVE-2002-0640
CVE-2002-0640
Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt).
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/21578unverifiedexploitdbwww.exploit-db.com/exploits/21579unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-030.0.txthttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000502http://marc.info/?l=bugtraq&m=102514371522793&w=2http://marc.info/?l=bugtraq&m=102514631524575&w=2http://marc.info/?l=bugtraq&m=102521542826833&w=2http://marc.info/?l=bugtraq&m=102532054613894&w=2http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0206-195http://www.cert.org/advisories/CA-2002-18.htmlhttp://www.debian.org/security/2002/dsa-134http://www.kb.cert.org/vuls/id/369347http://www.linuxsecurity.com/advisories/other_advisory-2177.htmlhttp://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:040