Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2002-0083

Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.

Published

2002-03-15T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

10.0

Weaknesses

Type: Primary
CWE-193

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	immunix	immunix	7.0	Yes
Application	mandrakesoft	mandrake_single_network_firewall	7.2	Yes
Application	openbsd	openssh	< 3.1	Yes
Application	openpkg	openpkg	1.0	Yes
Operating System	conectiva	linux	5.0	Yes
Operating System	conectiva	linux	5.1	Yes
Operating System	conectiva	linux	6.0	Yes
Operating System	conectiva	linux	7.0	Yes
Operating System	conectiva	linux	ecommerce	Yes
Operating System	conectiva	linux	graficas	Yes
Operating System	engardelinux	secure_linux	1.0.1	Yes
Operating System	mandrakesoft	mandrake_linux	7.1	Yes
Operating System	mandrakesoft	mandrake_linux	7.2	Yes
Operating System	mandrakesoft	mandrake_linux	8.0	Yes
Operating System	mandrakesoft	mandrake_linux	8.0	Yes
Operating System	mandrakesoft	mandrake_linux	8.1	Yes
Operating System	mandrakesoft	mandrake_linux_corporate_server	1.0.1	Yes
Operating System	redhat	linux	7.0	Yes
Operating System	redhat	linux	7.1	Yes
Operating System	redhat	linux	7.2	Yes
Operating System	suse	suse_linux	6.4	Yes
Operating System	suse	suse_linux	6.4	Yes
Operating System	suse	suse_linux	6.4	Yes
Operating System	suse	suse_linux	7.0	Yes
Operating System	suse	suse_linux	7.0	Yes
Operating System	suse	suse_linux	7.0	Yes
Operating System	suse	suse_linux	7.0	Yes
Operating System	suse	suse_linux	7.1	Yes
Operating System	suse	suse_linux	7.1	Yes
Operating System	suse	suse_linux	7.1	Yes
Operating System	suse	suse_linux	7.1	Yes
Operating System	suse	suse_linux	7.2	Yes
Operating System	suse	suse_linux	7.3	Yes
Operating System	suse	suse_linux	7.3	Yes
Operating System	suse	suse_linux	7.3	Yes
Operating System	trustix	secure_linux	1.1	Yes
Operating System	trustix	secure_linux	1.2	Yes
Operating System	trustix	secure_linux	1.5	Yes

References

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:13.openssh.asc Broken Link ([email protected])
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-004.txt.asc Broken Link ([email protected])
ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.10/CSSA-2002-SCO.10.txt Broken Link ([email protected])
ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.11/CSSA-2002-SCO.11.txt Broken Link ([email protected])
http://archives.neohapsis.com/archives/bugtraq/2002-03/0108.html Broken Link ([email protected])
http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0060.html Broken Link ([email protected])
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000467 Broken Link ([email protected])
http://marc.info/?l=bugtraq&m=101552065005254&w=2 Mailing List ([email protected])
http://marc.info/?l=bugtraq&m=101553908201861&w=2 Mailing List ([email protected])
http://marc.info/?l=bugtraq&m=101561384821761&w=2 Mailing List ([email protected])
http://marc.info/?l=bugtraq&m=101586991827622&w=2 Mailing List, Patch ([email protected])
http://online.securityfocus.com/advisories/3960 Broken Link, Third Party Advisory, VDB Entry ([email protected])
http://online.securityfocus.com/archive/1/264657 Broken Link, Third Party Advisory, VDB Entry ([email protected])
http://www.calderasystems.com/support/security/advisories/CSSA-2002-012.0.txt Broken Link ([email protected])
http://www.debian.org/security/2002/dsa-119 Broken Link, Vendor Advisory ([email protected])
http://www.iss.net/security_center/static/8383.php Broken Link ([email protected])
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-019.php Broken Link ([email protected])
http://www.linuxsecurity.com/advisories/other_advisory-1937.html Broken Link, Patch, Vendor Advisory ([email protected])
http://www.novell.com/linux/security/advisories/2002_009_openssh_txt.html Broken Link ([email protected])
http://www.openbsd.org/advisories/ssh_channelalloc.txt Vendor Advisory ([email protected])
http://www.osvdb.org/730 Broken Link ([email protected])
http://www.redhat.com/support/errata/RHSA-2002-043.html Broken Link ([email protected])
http://www.securityfocus.com/bid/4241 Broken Link, Third Party Advisory, VDB Entry ([email protected])
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:13.openssh.asc Broken Link (af854a3a-2127-422b-91ae-364da2661108)
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-004.txt.asc Broken Link (af854a3a-2127-422b-91ae-364da2661108)
ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.10/CSSA-2002-SCO.10.txt Broken Link (af854a3a-2127-422b-91ae-364da2661108)
ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.11/CSSA-2002-SCO.11.txt Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://archives.neohapsis.com/archives/bugtraq/2002-03/0108.html Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0060.html Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000467 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=101552065005254&w=2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=101553908201861&w=2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=101561384821761&w=2 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=101586991827622&w=2 Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
http://online.securityfocus.com/advisories/3960 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://online.securityfocus.com/archive/1/264657 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.calderasystems.com/support/security/advisories/CSSA-2002-012.0.txt Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2002/dsa-119 Broken Link, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.iss.net/security_center/static/8383.php Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-019.php Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.linuxsecurity.com/advisories/other_advisory-1937.html Broken Link, Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2002_009_openssh_txt.html Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.openbsd.org/advisories/ssh_channelalloc.txt Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/730 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2002-043.html Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/4241 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)