CVEvulnerability

CVE-2002-0083

9.8 CRITICAL Published 2002-03-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-03-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-193

Description

Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.

Affected configurations

• immunix immunix 7.0 • mandrakesoft mandrake single network firewall 7.2 • openbsd openssh (>= 2.0 < 3.1) • openpkg openpkg 1.0 • conectiva linux 5.0 • conectiva linux 5.1 • conectiva linux 6.0 • conectiva linux 7.0 • conectiva linux ecommerce • conectiva linux graficas • engardelinux secure linux 1.0.1 • mandrakesoft mandrake linux 7.1 • mandrakesoft mandrake linux 7.2 • mandrakesoft mandrake linux 8.0 • mandrakesoft mandrake linux 8.1 • mandrakesoft mandrake linux corporate server 1.0.1 • redhat linux 7.0 • redhat linux 7.1 • redhat linux 7.2 • suse suse linux 6.4 • suse suse linux 7.0 • suse suse linux 7.1 • suse suse linux 7.2 • suse suse linux 7.3 • trustix secure linux 1.1 • trustix secure linux 1.2 • trustix secure linux 1.5

Related

Weakness · CWE (1)

  • CWE-193 Off-by-one Error weakness

Referenced by CWE · observed example (1)

  • CWE-193 Off-by-one Error weakness

References