CVE-2002-0083
Critical
Description
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Openbsd Openssh
PublishedMar 15, 2002
First seenMar 15, 2002
How to fix
Update
- openbsd openssh3.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openbsd openssh | 2.0 ≤ v < 3.1 | 3.1 |
| immunix immunix | 7.0 | — |
| mandrakesoft mandrake_single_network_firewall | 7.2 | — |
| openpkg openpkg | 1.0 | — |
| conectiva linux | 5.0, 5.1, 6.0, 7.0, ecommerce, graficas | — |
| engardelinux secure_linux | 1.0.1 | — |
| mandrakesoft mandrake_linux | 7.1, 7.2, 8.0, 8.1 | — |
| mandrakesoft mandrake_linux_corporate_server | 1.0.1 | — |
| redhat linux | 7.0, 7.1, 7.2 | — |
| suse suse_linux | 6.4, 7.0, 7.1, 7.2, 7.3 | — |
| trustix secure_linux | 1.1, 1.2, 1.5 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.