|
| TC: | 12044 | |
| Description: | OpenSSH is a popular free version of the SSH protocol. There is a problem in the challenge response during authentication. The problem is present when OpenSSH is compiled with BSD_AUTH or SKEY support. You are vulnerable if ChallengeResponseAuthentication is enabled. Using privilege separation ( a special mode where the main part of OpenSSH is running is a process and the part requiring root privileges is running in a separate process ) minimizes the consequences of an attack. This problem can be exploited to run arbitrary code. The fact that authentication is not required makes the vulnerability very serious. | |
| TC Impact: | Gather Info | |
| Service: | ssh |
| Vulnerability Publication: | June 26, 2002 | |
| Advisory Copyright: | Mark Dowd | |
| Summary: | It is possible to run arbitrary code on your host running OpenSSH. | |
| Risk: | High | |
| CVSS 2.0 metrics: | Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete | |
| CVSS 2.0 Base Score: | 10 |
| Vulnerability Impact: |
Gain Root |
|---|
| Host Impact: | Your host can be fully compromised. | |
| Nature of Remediation: | Update the software. |
| Step required to fix the reported vulnerability: | |
***** Solution type: Upgrade Software ***** These vulnerabilities are eliminated by upgrading to OpenSSH version 3.4. OpenSSH version 3.4 will correct several other software defects with potential security implications not described in this advisory. See references for more information. |
| CVE Link: |
CVE-2002-0639 CVE-2002-0640 |
 |
|---|
| Glossary: |
Arbitrary Command Execution Buffer Overflow Denial of Service SSH |
|---|
