CVE Catalog
CVE-2002-0639
CriticalSummary
Integer overflow in sshd in OpenSSH versions 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication when OpenSSH is using SKEY or BSD_AUTH authentication.
Risk Assessment
An attacker could remotely gain access to the system, potentially leading to loss of confidentiality and integrity of data.
Recommendation
It is recommended to update OpenSSH to the latest version to mitigate this vulnerability and implement additional security measures to protect against attacks.
Original NVD description (English source)
Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication.