CVEvulnerability
CVE-2002-1646
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication schemes (e.g. password) than configured for the server.
Affected configurations
• ssh secure shell for servers 3.0
• ssh secure shell for servers 3.0.1
• ssh secure shell for servers 3.1
• ssh secure shell for servers 3.1.1
Related
Referenced by CWE · observed example (1)
- CWE-757 Selection of Less-Secure Algorithm During Negotiation weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2002-05/0204.html Patch
- http://www.ciac.org/ciac/bulletins/m-081.shtml www.ciac.org
- http://www.kb.cert.org/vuls/id/341187 US Government Resource
- http://www.securityfocus.com/bid/4810 Patch
- http://www.ssh.com/company/newsroom/article/201/ www.ssh.com
- http://www.ssh.com/products/ssh/advisories/authentication.cfm Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9163 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2002-05/0204.html Patch
- http://www.ciac.org/ciac/bulletins/m-081.shtml www.ciac.org
- http://www.kb.cert.org/vuls/id/341187 US Government Resource
- http://www.securityfocus.com/bid/4810 Patch
- http://www.ssh.com/company/newsroom/article/201/ www.ssh.com
- http://www.ssh.com/products/ssh/advisories/authentication.cfm Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9163 exchange.xforce.ibmcloud.com