High

CVE-2002-1644 - Unspecified vulnerability in Ssh2

Publication: 2002-11-25
Summary

SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, does not call setsid to remove the child process from the process group of the parent process, which allows attackers to gain certain privileges.

Risk level (CVSS 7.2)

High

7.2

Access Vector

  • Network
  • Adjacent Network
  • Local

Access Complexity

  • Low
  • Medium
  • High

Authentication

  • None
  • Single
  • Multiple

Confident. Impact

  • Complete
  • Partial
  • None

Integrity Impact

  • Complete
  • Partial
  • None

Affected Products

  • SSH Ssh2 2.0.13
  • SSH Ssh2 2.1
  • SSH Ssh2 2.2
  • SSH Ssh2 2.3
  • SSH Ssh2 2.4
  • SSH Ssh2 2.5
  • SSH Ssh2 3.0
  • SSH Ssh2 3.0.1
  • SSH Ssh2 3.1
  • SSH Ssh2 3.1.1
  • SSH Ssh2 3.1.2
  • SSH Ssh2 3.1.3
  • SSH Ssh2 3.1.4
  • SSH Ssh2 3.2
  • SSH Ssh2 3.2.1