|
| TC: | 12045 | |
| Description: | OpenSSH is a popular FREE version of the SSH protocol. There is a problem in the challenge response during authentication. OpenSSH contains a buffer overflow condition related to the number of responses received during challenge response authentication. Whatever the setting of the challenge response configuration option is and providing the target is using PAM modules(PAMAuthenticationViaKbdInt), with interactive keyboard authentication, an attacker can remotely execute code as the user is running sshd (often root). The flaws could also cause a denial-of-service condition. The seriousness of these vulnerabilities comes from the fact that it is not necessary for the attacker to authenticate to exploit the vulnerability. | |
| TC Impact: | Gather Info | |
| Service: | ssh |
| Vulnerability Publication: | June 26, 2002 | |
| Advisory Copyright: | Mark Dowd | |
| Summary: | It is possible to run arbitrary code on your host running OpenSSH. | |
| Risk: | High | |
| CVSS 2.0 metrics: | Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete | |
| CVSS 2.0 Base Score: | 10 |
| Vulnerability Impact: |
Gain Root |
|---|
| Host Impact: | Your host can be fully compromised. | |
| Nature of Remediation: | Update the software. |
| Step required to fix the reported vulnerability: | |
***** Solution type: Upgrade Software ***** Upgrade to OpenSSH version 3.4 These vulnerabilities are eliminated by upgrading to OpenSSH version 3.4. OpenSSH version 3.4 will correct several other software defects with potential security implications not described in this advisory. See references for more details. |
| CVE Link: |
CVE-2002-0640 |
 |
|---|
| Glossary: |
Arbitrary Command Execution Buffer Overflow SSH |
|---|
