Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSH挑战响应(Challenge-Response)机制交互键盘PAM验证远程缓冲区溢出漏洞
Vulnerability Description
OpenSSH是一种开放源码的SSH协议的实现，初始版本用于OpenBSD平台，现在已经被移植到多种Unix/Linux类操作系统下。 OpenSSH 2.3.1p1到3.3版本中的挑战响应(Challenge-Response)代码处理存在漏洞，远程攻击者可以利用这漏洞以sshd进程的权限(通常是root)在系统上执行任意指令。 漏洞是在挑战响应验证阶段处理接收到的应答时存在缓冲区溢出，不管系统中挑战响应验证选项是否配置，系统如果使用了通过交互键盘PAM验证PAMAuthenticationViaKbd
CVSS Information
N/A
Vulnerability Type
N/A