CVE-2002-0639 Integer overflow in n/a
Remote attackers can execute arbitrary code via integer overflow in OpenSSH during challenge-response authentication with SKEY or BSD_AUTH.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2002-0639?
CVE-2002-0639 is a critical vulnerability in OpenSSH, published on 2 Apr 2003. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication.
Weakness: CWE-190
Which versions are affected by CVE-2002-0639?
It affects 1 product.
Products include OpenSSH.
How do I fix CVE-2002-0639?
Upgrade to a fixed version.
Is CVE-2002-0639 being exploited?
There is no known exploitation of CVE-2002-0639 in the wild and no public exploit code.
Other vulnerabilities in OpenSSH
Sources
Also known as CVE-2002-0390, DEBIAN-CVE-2002-0639, GHSA-p3cc-85g2-jg55.