CVE-2002-0640 PUBLISHED CVSS 10 CRITICAL

Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt).

EPSS 66.96% · 98.5th percentile

Risk Scores

CVSS v2.0
10
EPSS Score
66.96%
98.5th percentile

Affected Products

VendorProductVersions
n/an/an/a
openbsdopenssh1.2.2, 1.2.3, 2.1

Timeline

References

Open in Interactive Console →