← Database

CVE-2002-0639

CRITICAL CVSS: 9.8 Published: 2002-07-03 Modified: 2026-06-16

Description

Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication.

Affected Platforms

Openbsd Openssh

Weakness Type

CWE-190

References