Buffer overflow in OpenSSH Challenge-response updated since 25.06.2002
Published:		08.01.2003
Source:		BUGTRAQ
SecurityVulns ID:		2114
Type:		local
Level:		10/10
Description:		Integer overflow during challenge-response processing. Buffer overflow on large number of responses.

Affected:		OPENSSH : OpenSSH 3.2
		OPENSSH : OpenSSH 3.4
		OPENSSH : OpenSSH 3.5

Original document		mmhs_(at)_hushmail.com, OPENSSH REMOTE ROOT COMPROMISE ALL VERSIONS (08.01.2003)
		Christophe Devine, OpenBSD 3.1 sshd remote root exploit (29.06.2002)
		Joe Testa, How to reproduce OpenSSH Overflow. (28.06.2002)
		OPENBSD, Revised OpenSSH Security Advisory (adv.iss) (27.06.2002)
		X-FORCE, ISS Advisory: OpenSSH Remote Challenge Vulnerability (27.06.2002)
		CERT, Advisory CA-2002-18 OpenSSH Vulnerabilities in Challenge Response (27.06.2002)
		SECURITEAM, [NEWS] Upcoming OpenSSH Vulnerability (Privileges Separation) (25.06.2002)

Files:		OpenSSH 2.9.9 - 3.3 remote challenge-response exploit
Discuss:		Read or add your comments to this news (0 comments)