OpenSSH 'sshd' Challenge Response Authentication Buffer Overflow Vulnerability

  1. Network Vulnerabilities
  2. Buffer overflow
  3. OpenSSH 'sshd' Challenge Response Authentication Buffer Overflow Vulnerability
Summary
The host is running OpenSSH sshd with ChallengeResponseAuthentication enabled and is prone to buffer overflow vulnerability.
Impact
Successful exploitation could allows remote attackers to execute arbitrary code and gain escalated privileges. Impact Level: Application
Solution
Upgrade to OpenSSH version 3.4 or later For updates refer to http://www.openssh.com/
Insight
The flaw is due to an error in handling a large number of responses during challenge response authentication when using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt).
Affected
OpenSSH versions 2.3.1 to 3.3
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities