CVE-2002-0640: Buffer Overflow

Published Jul 3, 2002

Updated

Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt).

Affected Software

26 affected components

OpenBSD OpenSSH=1.2.2

OpenBSD OpenSSH=1.2.3

OpenBSD OpenSSH=2.1

OpenBSD OpenSSH=2.1.1

OpenBSD OpenSSH=2.2

OpenBSD OpenSSH=2.3

OpenBSD OpenSSH=2.5

OpenBSD OpenSSH=2.5.1

OpenBSD OpenSSH=2.5.2

OpenBSD OpenSSH=2.9

OpenBSD OpenSSH=2.9.9

OpenBSD OpenSSH=2.9p1

OpenBSD OpenSSH=2.9p2

OpenBSD OpenSSH=3.0

OpenBSD OpenSSH=3.0.1

OpenBSD OpenSSH=3.0.1p1

OpenBSD OpenSSH=3.0.2

OpenBSD OpenSSH=3.0.2p1

OpenBSD OpenSSH=3.0p1

OpenBSD OpenSSH=3.1

OpenBSD OpenSSH=3.1p1

OpenBSD OpenSSH=3.2

OpenBSD OpenSSH=3.2.2p1

OpenBSD OpenSSH=3.2.3p1

OpenBSD OpenSSH=3.3

OpenBSD OpenSSH=3.3p1

Event History

Jul 3, 2002

CVE Published

04:00 AM

Apr 2, 2003

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0640?

CVE-2002-0640 is considered a high severity vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2002-0640?

To mitigate CVE-2002-0640, upgrade OpenSSH to a version later than 3.3, which does not contain this vulnerability.

Who is affected by CVE-2002-0640?

CVE-2002-0640 affects OpenSSH versions from 2.3.1 to 3.3, particularly when using PAM modules with interactive keyboard authentication.

What are the risks of CVE-2002-0640?

The main risk of CVE-2002-0640 is that attackers can exploit the buffer overflow to execute arbitrary code on the affected server.

Is CVE-2002-0640 still a threat today?

While CVE-2002-0640 is an older vulnerability, systems running affected OpenSSH versions could still be at risk if not patched.