CVE-2002-0575

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and KerberosTgtPassing or AFSTokenPassing enabled, allows remote and local authenticated users to gain privileges.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2002-04/0298.html
http://archives.neohapsis.com/archives/bugtraq/2002-04/0394.htmlPatch, Vendor Advisory
http://marc.info/?l=bugtraq&m=102167972421837&w=2
http://marc.info/?l=vuln-dev&m=101924296115863&w=2
http://online.securityfocus.com/archive/1/268718
http://online.securityfocus.com/archive/1/269701
http://www.iss.net/security_center/static/8896.phpPatch, Vendor Advisory
http://www.osvdb.org/781
http://www.securityfocus.com/bid/4560Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-04/0298.html
http://archives.neohapsis.com/archives/bugtraq/2002-04/0394.htmlPatch, Vendor Advisory
http://marc.info/?l=bugtraq&m=102167972421837&w=2
http://marc.info/?l=vuln-dev&m=101924296115863&w=2
http://online.securityfocus.com/archive/1/268718
http://online.securityfocus.com/archive/1/269701
http://www.iss.net/security_center/static/8896.phpPatch, Vendor Advisory
http://www.osvdb.org/781
http://www.securityfocus.com/bid/4560Exploit, Patch, Vendor Advisory

Timeline

Published: Jun 18, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-05765.0ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP r CVE-2002-05772.1Vulnerability in passwd for HP-UX 11.00 and 11.11 allows local users to corrupt the password file and cause a denial of service.CVE-2002-05787.5Buffer overflow in 4D WebServer 6.7.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP r CVE-2002-05797.5WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to the /admin/adminpro CVE-2002-05807.5WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in CVE-2002-05817.5WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials from the database vi CVE-2002-05825.0WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory, which allows remote CVE-2002-05835.0WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in the /reports/temp di CVE-2002-05845.0WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the ts_app_process.asp script, w CVE-2002-05855.0Unknown vulnerability in ndd for HP-UX 11.11 with certain TRANSPORT patches allows attackers to cause a denial of service.CVE-2002-05867.5Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through CVE-2002-05877.5Buffer overflow in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows