CVE-2002-0765 Auth bypass in n/a

What is CVE-2002-0765?

CVE-2002-0765 is a high-severity authentication bypass vulnerability in Openbsd Openbsd, published on 2 Apr 2003. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

sshd in OpenSSH 3.2.2, when using YP with netgroups and under certain conditions, may allow users to successfully authenticate and log in with another user's password.

Which versions are affected by CVE-2002-0765?

It affects 2 products.

Products include Openbsd Openbsd, OpenSSH.

How do I fix CVE-2002-0765?

Upgrade to a fixed version.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2002-0765 being exploited?

There is no known exploitation of CVE-2002-0765 in the wild and no public exploit code.

Other vulnerabilities in Openbsd Openbsd

• CVE-2007-1365 Memory corruption in n/a Critical 10.0
• CVE-2004-0220 Integer overflow in n/a Critical 10.0
• CVE-2004-0083 Memory corruption in n/a Critical 10.0
• CVE-2004-0084 Memory corruption in n/a Critical 10.0
• CVE-2001-0284 Memory corruption in n/a Critical 10.0

All Openbsd Openbsd vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2002-0765, GHSA-hw3r-x5qh-749j.