CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2002-0083
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.
Severity
- EPSS
- 15% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- CWE
- CWE-193
- Published
- Modified
- Record from
- the NVD, synced
Affected
- conectiva:linux
- engardelinux:secure_linux
- immunix:immunix
- mandrakesoft:mandrake_linux
- mandrakesoft:mandrake_linux_corporate_server
- mandrakesoft:mandrake_single_network_firewall
- openbsd:openssh
- openpkg:openpkg
- redhat:linux
- suse:suse_linux
- trustix:secure_linux
References
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:13.openssh.asc
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-004.txt.asc
- ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.10/CSSA-2002-SCO.10.txt
- ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.11/CSSA-2002-SCO.11.txt
- http://archives.neohapsis.com/archives/bugtraq/2002-03/0108.html