CVE-2002-0639
Publicada em · Atualizada em
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 18%
probabilidade de exploração
18%top 3% das CVEs
exploração observada
nãonenhuma fonte reporta
Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication.
Produtos afetados
n/a · n/aReferências
ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-030.0.txthttp://archives.neohapsis.com/archives/bugtraq/2002-06/0335.htmlhttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000502http://marc.info/?l=bugtraq&m=102514371522793&w=2http://marc.info/?l=bugtraq&m=102514631524575&w=2http://marc.info/?l=bugtraq&m=102521542826833&w=2https://twitter.com/RooneyMcNibNug/status/1152332585349111810https://web.archive.org/web/20080622172542/www.iss.net/threats/advise123.htmlhttp://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0206-195http://www.cert.org/advisories/CA-2002-18.htmlhttp://www.debian.org/security/2002/dsa-134http://www.iss.net/security_center/static/9169.php