CVE-2002-0575

OpenSSH < 2.9.9 and 3.x < 3.2.1 - Authenticated Buffer Overflow with Kerberos/AFS Support

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-0575. PoCs published by Marcell Fodor.

AI-analyzed exploit summary The provided text describes a buffer overflow vulnerability in OpenSSH related to Kerberos 4 TGT/AFS token handling. Exploitation can lead to remote code execution, with authentication requirements varying by version.

Description

Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and KerberosTgtPassing or AFSTokenPassing enabled, allows remote and local authenticated users to gain privileges.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Marcell Fodor · textremotelinux

https://www.exploit-db.com/exploits/21402

View Code ZIP pw:eip

The provided text describes a buffer overflow vulnerability in OpenSSH related to Kerberos 4 TGT/AFS token handling. Exploitation can lead to remote code execution, with authentication requirements varying by version.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Moderate

Reliability

Theoretical

Target: OpenSSH versions prior to 2.9.9 and 2.9.9+

No auth needed

Prerequisites: Network access to vulnerable OpenSSH server · Ability to send malformed Kerberos 4 TGT/AFS tokens

MITRE ATT&CK