CVEvulnerability

CVE-2002-1644

7.2 HIGH Published 2002-11-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-11-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, does not call setsid to remove the child process from the process group of the parent process, which allows attackers to gain certain privileges.

Affected configurations

• ssh ssh2 2.0.13 • ssh ssh2 2.1 • ssh ssh2 2.2 • ssh ssh2 2.3 • ssh ssh2 2.4 • ssh ssh2 2.5 • ssh ssh2 3.0 • ssh ssh2 3.0.1 • ssh ssh2 3.1 • ssh ssh2 3.1.1 • ssh ssh2 3.1.2 • ssh ssh2 3.1.3 • ssh ssh2 3.1.4 • ssh ssh2 3.2 • ssh ssh2 3.2.1

References