CVE-2002-0083

Severity

99%

Complexity

99%

Confidentiality

165%

Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.

Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.

CVSS 2.0 Base Score 9.9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C).

Overview

First reported 22 years ago

2002-03-15 05:00:00

Last updated 8 years ago

2016-10-18 02:16:00

Affected Software

MandrakeSoft Mandrake Single Network Firewall 7.2

7.2

OpenBSD OpenSSH 2.1

2.1

OpenBSD OpenSSH 2.1.1

2.1.1

OpenBSD OpenSSH 2.2

2.2

OpenBSD OpenSSH 2.3

2.3

OpenBSD OpenSSH 2.5

2.5

OpenBSD OpenSSH 2.5.1

2.5.1

OpenBSD OpenSSH 2.5.2

2.5.2

OpenBSD OpenSSH 2.9

2.9

OpenBSD OpenSSH 2.9.9

2.9.9

OpenBSD OpenSSH 2.9 p1

2.9p1

OpenBSD OpenSSH 2.9 p2

2.9p2

OpenBSD OpenSSH 3.0.1

3.0.1

OpenPKG 1.0

1.0

Conectiva Conectiva Linux 5.0

5.0

Conectiva Conectiva Linux 5.1

5.1

Conectiva Conectiva Linux 6.0

6.0

Conectiva Conectiva Linux 7.0

7.0

Conectiva Conectiva Linux ecommerce

ecommerce

Conectiva Conectiva Linux graficas

graficas

Engarde Secure Linux 1.0.1

1.0.1

MandrakeSoft Mandrake Linux 7.1

7.1

MandrakeSoft Mandrake Linux 7.2

7.2

MandrakeSoft Mandrake Linux 8.0

8.0

MandrakeSoft Mandrake Linux 8.1

8.1

MandrakeSoft Mandrake Linux Corporate Server 1.0.1

1.0.1

Red Hat Linux 7.0

7.0

Red Hat Linux 7.1

7.1

Red Hat Linux 7.2

7.2

SuSE SuSE Linux 6.4 alpha

6.4

SuSE SuSE Linux 7.0 alpha

7.0

SuSE SuSE Linux 7.1 alpha

7.1

Trustix Secure Linux 1.1

1.1

Trustix Secure Linux 1.2

1.2

Trustix Secure Linux 1.5

1.5

References

FreeBSD-SA-02:13

NetBSD-SA2002-004

CSSA-2002-SCO.10

CSSA-2002-SCO.11

20020311 TSLSA-2002-0039 - openssh

20020307 [VulnWatch] [PINE-CERT-20020301] OpenSSH off-by-one

CLA-2002:467

20020307 [PINE-CERT-20020301] OpenSSH off-by-one

20020307 OpenSSH Security Advisory (adv.channelalloc)

20020308 [OpenPKG-SA-2002.002] OpenPKG Security Advisory (openssh)

20020310 OpenSSH 2.9.9p2 packages for Immunix 6.2 with latest fix

HPSBTL0203-029

20020328 OpenSSH channel_lookup() off by one exploit

CSSA-2002-012.0

DSA-119

Vendor Advisory

openssh-channel-error(8383)

MDKSA-2002:019

ESA-20020307-007

Patch, Vendor Advisory

SuSE-SA:2002:009

http://www.openbsd.org/advisories/ssh_channelalloc.txt

730

RHSA-2002:043

4241

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.