{"schemaVersion":3,"id":"CVE-2002-0639","aliases":["DEBIAN-CVE-2002-0639"],"status":"published","duplicateOf":null,"title":null,"description":"Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication.","dates":{"published":"2003-04-02T05:00:00.000Z","modified":"2024-08-08T02:56:38.321Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true}]},"epss":{"probability":0.18288,"percentile":0.97217,"severity":"medium","asOf":"2026-10-22T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-22T00:00:00.000Z","baselineScore":0.18288},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-22T00:00:00.000Z","score":0.18288,"percentile":0.97217}],"last30":[{"date":"2026-09-22T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.18288,"percentile":null},{"date":"2026-10-22T00:00:00.000Z","score":0.18288,"percentile":0.97217}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_6D3078EEA1F41C9D","name":"Exploit Reference (marc.info)","source":"reference","url":"http://marc.info/?l=bugtraq&m=102514371522793&w=2","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_B0A40D97DF874E55","name":"Exploit Reference (marc.info)","source":"reference","url":"http://marc.info/?l=bugtraq&m=102521542826833&w=2","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_30A0AFC0B383EC3A","name":"Exploit Reference (marc.info)","source":"reference","url":"http://marc.info/?l=bugtraq&m=102514631524575&w=2","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":3,"weaknesses":[{"id":"CWE-190","name":"Integer Overflow or Wraparound","description":"The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/190.html"}],"affected":[{"vendor":"debian","product":"openssh","name":"openssh","label":"openssh","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/openssh","purlType":"deb","versions":[{"text":"< 1:3.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:3.4","eol":null,"hubHref":null},{"vendor":"openbsd","product":"openssh","name":"openssh","label":"openssh","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 2.9.9, ≤ 3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.9.9, ≤ 3.3","eol":null,"hubHref":"/vendor/openbsd/openssh"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.debian.org/security/2002/dsa-134","label":"www.debian.org/security/2002/dsa-134","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Broken Link"]},{"url":"http://www.iss.net/security_center/static/9169.php","label":"www.iss.net/security_center/static/9169.php","hostname":"www.iss.net","tags":["VDB Entry","X Refsource XF","Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0335.html","label":"archives.neohapsis.com/archives/bugtraq/2002-06/0335.html","hostname":"archives.neohapsis.com","tags":["Mailing List","X Refsource BUGTRAQ","Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=102514371522793&w=2","label":"marc.info?l=bugtraq&m=102514371522793&w=2","hostname":"marc.info","tags":["Mailing List","X Refsource BUGTRAQ","Exploit"]},{"url":"http://www.osvdb.org/6245","label":"www.osvdb.org/6245","hostname":"www.osvdb.org","tags":["VDB Entry","X Refsource OSVDB","Broken Link"]},{"url":"http://www.cert.org/advisories/CA-2002-18.html","label":"www.cert.org/advisories/CA-2002-18.html","hostname":"www.cert.org","tags":["Third Party Advisory","X Refsource CERT","US Government Resource"]},{"url":"http://marc.info/?l=bugtraq&m=102521542826833&w=2","label":"marc.info?l=bugtraq&m=102521542826833&w=2","hostname":"marc.info","tags":["Mailing List","X Refsource BUGTRAQ","Exploit"]},{"url":"http://www.securityfocus.com/bid/5093","label":"www.securityfocus.com/bid/5093","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2177.html","label":"www.linuxsecurity.com/advisories/other_advisory-2177.html","hostname":"www.linuxsecurity.com","tags":["Vendor Advisory","X Refsource ENGARDE","Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/369347","label":"www.kb.cert.org/vuls/id/369347","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000502","label":"distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000502","hostname":"distro.conectiva.com.br","tags":["Vendor Advisory","X Refsource CONECTIVA","Broken Link"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0206-195","label":"www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0206-195","hostname":"www1.itrc.hp.com","tags":["Vendor Advisory","X Refsource HP","Broken Link"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:040","label":"www.mandrakesoft.com/security/advisories?name=MDKSA-2002:040","hostname":"www.mandrakesoft.com","tags":["Vendor Advisory","X Refsource MANDRAKE","Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=102514631524575&w=2","label":"marc.info?l=bugtraq&m=102514631524575&w=2","hostname":"marc.info","tags":["Mailing List","X Refsource BUGTRAQ","Exploit"]},{"url":"https://web.archive.org/web/20080622172542/www.iss.net/threats/advise123.html","label":"web.archive.org/web/20080622172542/www.iss.net/threats/advise123.html","hostname":"web.archive.org","tags":["Third Party Advisory","X Refsource ISS"]},{"url":"https://twitter.com/RooneyMcNibNug/status/1152332585349111810","label":"twitter.com/RooneyMcNibNug/status/1152332585349111810","hostname":"twitter.com","tags":["X Refsource MISC","Broken Link"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2002-0639","label":"security-tracker.debian.org/tracker/CVE-2002-0639","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":["CVE-2002-0390"],"related":[]},"timeline":[{"kind":"published","date":"2003-04-02T05:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-08T02:56:38.321Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":90,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T14:40:33.447Z","stale":false,"partial":false}}