Nessus Plugin #10883

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

OpenSSH Channel Code Off by 1

Family:

Gain root remotely

Category:

infos

Copyright:

This script is Copyright (c) 2002 Thomas Reinke

Summary:

Checks for the remote OpenSSH version

Version:

$Revision: 1.14 $

Cve_id:

CVE-2002-0083

Bugtraq_id:

4241

Xrefs:

-

Description:

You are running a version of OpenSSH which is older than 3.1.

Versions prior than 3.1 are vulnerable to an off by one error
that allows local users to gain root access, and it may be
possible for remote users to similarly compromise the daemon
for remote access.

In addition, a vulnerable SSH client may be compromised by
connecting to a malicious SSH daemon that exploits this
vulnerability in the client code, thus compromising the
client system.

Solution : Upgrade to OpenSSH 3.1 or apply the patch for
prior versions. (See: http://www.openssh.org)

Risk factor : High