CVE-2002-0640
OpenSSH 2.3.1-3.3 - Remote Code Execution via PAM Keyboard Interactive Authentication
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2002-0640. PoCs published by Gobbles Security, Christophe Devine.
AI-analyzed exploit summary The provided text is a vulnerability writeup for CVE-2002-0640, describing two remotely exploitable vulnerabilities in OpenSSH related to the SSH2 challenge-response mechanism. It outlines conditions for exploitation, affected configurations, and mitigation steps, but does not contain actual exploit code.
Description
Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt).
Exploits (2)
The provided text is a vulnerability writeup for CVE-2002-0640, describing two remotely exploitable vulnerabilities in OpenSSH related to the SSH2 challenge-response mechanism. It outlines conditions for exploitation, affected configurations, and mitigation steps, but does not contain actual exploit code.
This exploit targets a vulnerability in OpenSSH's SSH2 challenge-response mechanism, allowing unauthenticated remote code execution by crafting a malicious response. It includes shellcode to spawn a root shell on port 128.