CVE-2002-1715: High severity SSH ssh vulnerability

Published Dec 31, 2002

Updated

SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access.

Affected Software

52 affected components

SSH ssh=1.2.6

SSH ssh=1.2.0

SSH Ssh2=2.0.13

SSH Ssh2=2.1

SSH Ssh2=2.0.3

SSH Ssh2=2.0.8

SSH ssh=1.2.9

SSH ssh=1.2.21

SSH ssh=1.2.15

SSH Ssh2=2.0.11

SSH Ssh2=2.0.9

SSH Ssh2=2.2

SSH ssh=1.2.4

SSH ssh=1.2.14

SSH ssh=1.2.19

SSH Ssh2=2.0

SSH Ssh2=2.0.5

SSH ssh=1.2.8

SSH ssh=1.2.31

SSH ssh=1.2.24

SSH ssh=1.2.18

SSH ssh=1.2.7

SSH ssh=1.2.20

SSH ssh=1.2.3

SSH ssh=1.2.12

SSH ssh=1.2.25

SSH ssh=1.2.17

SSH Ssh2=2.0.6

SSH Ssh2=3.0

SSH Ssh2=2.0.4

SSH ssh=1.2.30

SSH ssh=1.2.1

SSH ssh=1.2.26

SSH ssh=1.2.27

SSH ssh=1.2.16

SSH Ssh2=2.4

SSH ssh=1.2.28

SSH Ssh2=2.0.1

SSH ssh=1.2.29

SSH ssh=1.2.11

SSH ssh=1.2.5

SSH Ssh2=2.0.10

SSH ssh=1.2.13

SSH ssh=1.2.22

SSH ssh=1.2.2

SSH Ssh2=2.3

SSH ssh=1.2.23

SSH Ssh2=2.5

SSH Ssh2=2.0.12

SSH ssh=1.2.10

SSH Ssh2=2.0.7

SSH Ssh2=2.0.2

Event History

Dec 31, 2002

CVE Published

05:00 AM

Jun 21, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1715?

CVE-2002-1715 has a medium severity rating due to its potential to allow unauthorized shell access.

How do I fix CVE-2002-1715?

To fix CVE-2002-1715, restrict write permissions on directories to prevent script uploads and ensure proper configuration of user shells.

What versions of SSH are affected by CVE-2002-1715?

CVE-2002-1715 affects SSH versions 1 through 3, including specific versions like 1.2.0 and 2.0.13.

What is the main impact of CVE-2002-1715?

The main impact of CVE-2002-1715 is that it allows local users to bypass restricted shell environments, gaining unrestricted access.

Who is primarily at risk from CVE-2002-1715?

Local users who have access to a vulnerable SSH application may exploit CVE-2002-1715 to gain unauthorized shell access.

CVE-2002-1715: High severity SSH ssh vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2002-1715?

How do I fix CVE-2002-1715?

What versions of SSH are affected by CVE-2002-1715?

What is the main impact of CVE-2002-1715?

Who is primarily at risk from CVE-2002-1715?

Company

Resources

Contact