critical9.8Public exploit code
CVE-2002-0083
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OpenSSH 2.x/3.0.1/3.0.2 - Channel Code Off-by-One2002-03-07 · remote · unix · Verified
Impact
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Immunix | Immunix | Version 7.0 |
| Mandrakesoft | Mandrake Single Network Firewall | Version 7.2 |
| Openbsd | Openssh | from 2.0 before 3.1 |
| Openpkg | Openpkg | Version 1.0 |
| Conectiva | Linux | Versions 5.0, 5.1, 6.0, 7.0, ecommerce, graficas |
| Engardelinux | Secure Linux | Version 1.0.1 |
| Mandrakesoft | Mandrake Linux | Versions 7.1, 7.2, 8.0, 8.1 |
| Mandrakesoft | Mandrake Linux Corporate Server | Version 1.0.1 |
| Redhat | Linux | Versions 7.0, 7.1, 7.2 |
| Suse | Suse Linux | Versions 6.4, 7.0, 7.1, 7.2, 7.3 |
| Trustix | Secure Linux | Versions 1.1, 1.2, 1.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-03/0108.html
- http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0060.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000467
- http://marc.info/?l=bugtraq&m=101552065005254&w=2
- http://marc.info/?l=bugtraq&m=101553908201861&w=2
- http://marc.info/?l=bugtraq&m=101561384821761&w=2
- http://marc.info/?l=bugtraq&m=101586991827622&w=2
- http://online.securityfocus.com/advisories/3960
- http://online.securityfocus.com/archive/1/264657
- http://www.calderasystems.com/support/security/advisories/CSSA-2002-012.0.txt
- http://www.debian.org/security/2002/dsa-119
- http://www.iss.net/security_center/static/8383.php
- http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-019.php
- http://www.linuxsecurity.com/advisories/other_advisory-1937.html
- http://www.novell.com/linux/security/advisories/2002_009_openssh_txt.html
- http://www.openbsd.org/advisories/ssh_channelalloc.txt
- http://www.osvdb.org/730
- http://www.redhat.com/support/errata/RHSA-2002-043.html
- http://www.securityfocus.com/bid/4241
- http://archives.neohapsis.com/archives/bugtraq/2002-03/0108.html
- http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0060.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000467
- http://marc.info/?l=bugtraq&m=101552065005254&w=2
- http://marc.info/?l=bugtraq&m=101553908201861&w=2
- http://marc.info/?l=bugtraq&m=101561384821761&w=2