Read the docs
TI-2002-00079 Aliases CVE-2002-0083GHSA-w9fg-77jf-ghf9

Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or…

Priority MEDIUM 58CWE-193Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-193 and the CVSS impact.

Summary

Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.

Why it matters now

EPSS 0.14688 96th percentileScored 2026-11-07
Fix Fixed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 38

CPEVersionsRoleVendor
cpe:2.3:a:immunix:immunix:7.0:*:*:*:*:*:*:*7.0VulnerableImmunix
cpe:2.3:a:mandrakesoft:mandrake_single_network_firewall:7.2:*:*:*:*:*:*:*7.2VulnerableMandrakesoft
cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*2.0 to before 3.1VulnerableOpenBSD
cpe:2.3:a:openpkg:openpkg:1.0:*:*:*:*:*:*:*1.0VulnerableOpenpkg
cpe:2.3:o:conectiva:linux:5.0:*:*:*:*:*:*:*5.0VulnerableConectiva
cpe:2.3:o:conectiva:linux:5.1:*:*:*:*:*:*:*5.1VulnerableConectiva
cpe:2.3:o:conectiva:linux:6.0:*:*:*:*:*:*:*6.0VulnerableConectiva
cpe:2.3:o:conectiva:linux:7.0:*:*:*:*:*:*:*7.0VulnerableConectiva
cpe:2.3:o:conectiva:linux:ecommerce:*:*:*:*:*:*:*ecommerceVulnerableConectiva
cpe:2.3:o:conectiva:linux:graficas:*:*:*:*:*:*:*graficasVulnerableConectiva
  • cpe:2.3:a:immunix:immunix:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Immunix
  • cpe:2.3:a:mandrakesoft:mandrake_single_network_firewall:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Mandrakesoft
  • cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:* Versions 2.0 to before 3.1 Vulnerable ·OpenBSD
  • cpe:2.3:a:openpkg:openpkg:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Openpkg
  • cpe:2.3:o:conectiva:linux:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Conectiva
  • cpe:2.3:o:conectiva:linux:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·Conectiva
  • cpe:2.3:o:conectiva:linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Conectiva
  • cpe:2.3:o:conectiva:linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Conectiva
  • cpe:2.3:o:conectiva:linux:ecommerce:*:*:*:*:*:*:* Versions ecommerce Vulnerable ·Conectiva
  • cpe:2.3:o:conectiva:linux:graficas:*:*:*:*:*:*:* Versions graficas Vulnerable ·Conectiva
Show 28 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:engardelinux:secure_linux:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableEngardelinux
cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*7.1VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*7.2VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*8.0VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:ppc:*:*:*:*:*8.0VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*8.1VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableMandrakesoft
cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*7.1VulnerableRed Hat
cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*7.2VulnerableRed Hat
cpe:2.3:o:suse:suse_linux:6.4:*:i386:*:*:*:*:*6.4VulnerableSUSE
cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:*6.4VulnerableSUSE
cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:*6.4 alphaVulnerableSUSE
cpe:2.3:o:suse:suse_linux:7.0:*:i386:*:*:*:*:*7.0VulnerableSUSE
cpe:2.3:o:suse:suse_linux:7.0:*:ppc:*:*:*:*:*7.0VulnerableSUSE
cpe:2.3:o:suse:suse_linux:7.0:*:sparc:*:*:*:*:*7.0VulnerableSUSE
cpe:2.3:o:suse:suse_linux:7.0:alpha:*:*:*:*:*:*7.0 alphaVulnerableSUSE
cpe:2.3:o:suse:suse_linux:7.1:*:spa:*:*:*:*:*7.1VulnerableSUSE
cpe:2.3:o:suse:suse_linux:7.1:*:sparc:*:*:*:*:*7.1VulnerableSUSE
cpe:2.3:o:suse:suse_linux:7.1:*:x86:*:*:*:*:*7.1VulnerableSUSE
cpe:2.3:o:suse:suse_linux:7.1:alpha:*:*:*:*:*:*7.1 alphaVulnerableSUSE
cpe:2.3:o:suse:suse_linux:7.2:*:i386:*:*:*:*:*7.2VulnerableSUSE
cpe:2.3:o:suse:suse_linux:7.3:*:i386:*:*:*:*:*7.3VulnerableSUSE
cpe:2.3:o:suse:suse_linux:7.3:*:ppc:*:*:*:*:*7.3VulnerableSUSE
cpe:2.3:o:suse:suse_linux:7.3:*:sparc:*:*:*:*:*7.3VulnerableSUSE
cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:*1.1VulnerableTrustix
cpe:2.3:o:trustix:secure_linux:1.2:*:*:*:*:*:*:*1.2VulnerableTrustix
cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*1.5VulnerableTrustix
  • cpe:2.3:o:engardelinux:secure_linux:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Engardelinux
  • cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:ppc:*:*:*:*:* Versions 8.0 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
  • cpe:2.3:o:suse:suse_linux:6.4:*:i386:*:*:*:*:* Versions 6.4 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:* Versions 6.4 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:* Versions 6.4 alpha Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:7.0:*:i386:*:*:*:*:* Versions 7.0 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:7.0:*:ppc:*:*:*:*:* Versions 7.0 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:7.0:*:sparc:*:*:*:*:* Versions 7.0 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:7.0:alpha:*:*:*:*:*:* Versions 7.0 alpha Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:7.1:*:spa:*:*:*:*:* Versions 7.1 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:7.1:*:sparc:*:*:*:*:* Versions 7.1 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:7.1:*:x86:*:*:*:*:* Versions 7.1 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:7.1:alpha:*:*:*:*:*:* Versions 7.1 alpha Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:7.2:*:i386:*:*:*:*:* Versions 7.2 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:7.3:*:i386:*:*:*:*:* Versions 7.3 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:7.3:*:ppc:*:*:*:*:* Versions 7.3 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:7.3:*:sparc:*:*:*:*:* Versions 7.3 Vulnerable ·SUSE
  • cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Trustix
  • cpe:2.3:o:trustix:secure_linux:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Trustix
  • cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:* Versions 1.5 Vulnerable ·Trustix

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Linux 7.0Fixed RHSA-2002:043
Red Hat Linux 7.1Fixed RHSA-2002:043
Red Hat Linux 7.2Fixed RHSA-2002:043

Timeline

  1. 2026-10-02 Threatist record created from CVE-2002-0083
  2. 2026-10-03 Alias added: GHSA-w9fg-77jf-ghf9

References

Patch 2

Advisory 7

Other 7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences