CVE-2002-1646: High severity SSH Secure Shell for Servers vulnerability
Published Dec 31, 2002
·Updated
SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication schemes (e.g. password) than configured for the server.
Affected Software
4 affected components
SSH Secure Shell for Servers=3.0
SSH Secure Shell for Servers=3.0.1
SSH Secure Shell for Servers=3.1
SSH Secure Shell for Servers=3.1.1
Remediation
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Mar 28, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1646?
CVE-2002-1646 is considered a high severity vulnerability due to its potential to allow less secure authentication methods.
2
How do I fix CVE-2002-1646?
To fix CVE-2002-1646, update your SSH Secure Shell for Servers software to a version higher than 3.1.1.
3
What versions are affected by CVE-2002-1646?
CVE-2002-1646 affects SSH Secure Shell for Servers versions 3.0.0 to 3.1.1.
4
Can CVE-2002-1646 be exploited remotely?
Yes, CVE-2002-1646 can be exploited by remote attackers who can circumvent configured authentication schemes.
5
What are the consequences of exploiting CVE-2002-1646?
Exploiting CVE-2002-1646 may allow attackers to use weaker authentication methods, potentially compromising server security.