CVE-2002-0640

Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt).

Scoring

CVSS base score
3.35
EPSS probability
66.96%
Published
2003-04-02
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs