Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSH挑战响应(Challenge-Response)机制交互键盘PAM验证远程缓冲区溢出漏洞
Vulnerability Description
OpenSSH是一种开放源码的SSH协议的实现，初始版本用于OpenBSD平台，现在已经被移植到多种Unix/Linux类操作系统下。 OpenSSH 2.3.1p1到3.3版本中的挑战响应(Challenge-Response)代码处理存在漏洞，远程攻击者可以利用这漏洞以sshd进程的权限(通常是root)在系统上执行任意指令。 漏洞是在挑战响应验证阶段处理接收到的应答时存在缓冲区溢出，不管系统中挑战响应验证选项是否配置，系统如果使用了通过交互键盘PAM验证PAMAuthenticationViaKbd
CVSS Information
N/A
Vulnerability Type
N/A