CVE-2002-0083

highpriority · attend · 54EPSS 0.147 · 97 %ileexploit · functionalEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · functional

Likely / severe?

14.7% (97th) EPSS

CVSS 10 · high

Is it mine?

32 products

Check your exposure

Who says so?

3 sources

enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-23

Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.

cvss

Technical severity, 0–10. One row per scoring source.

10.0

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 9.3–10

v2.010highAV:N/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 10 · impact 10

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v2.010criticalAV:N/AC:L/Au:N/C:C/I:C/A:Csecondary · FSTEC (BDU) RU

v3.19.3criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Psecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-193USprimaryCWE-203US

exploits (1)

Public proof-of-concept and weaponised exploit code.

EDB-21314OpenSSH 2.x/3.0.1/3.0.2 - Channel Code Off-by-Onefunctional · exploit_db

affected products (32)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
Red Hat Inc. Red Hat Enterprise Linux≤ 7fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 7.3fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 7.2fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 7.1 for zSeriesfstec_bduRU
conectiva linux= 5.0nvdUScpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*
conectiva linux= 5.1nvdUScpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*
conectiva linux= 6.0nvdUScpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*
conectiva linux= 7.0nvdUScpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*
conectiva linux= ecommercenvdUScpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*
conectiva linux= graficasnvdUScpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*
engardelinux secure linux= 1.0.1nvdUScpe:2.3:o:engardelinux:secure_linux:*:*:*:*:*:*:*:*
immunix immunix= 7.0nvdUScpe:2.3:a:immunix:immunix:*:*:*:*:*:*:*:*
mandrakesoft mandrake linux= 7.1nvdUScpe:2.3:o:mandrakesoft:mandrake_linux:*:*:*:*:*:*:*:*
mandrakesoft mandrake linux= 7.2nvdUScpe:2.3:o:mandrakesoft:mandrake_linux:*:*:*:*:*:*:*:*
mandrakesoft mandrake linux= 8.0nvdUScpe:2.3:o:mandrakesoft:mandrake_linux:*:*:*:*:*:*:*:*
mandrakesoft mandrake linux= 8.1nvdUScpe:2.3:o:mandrakesoft:mandrake_linux:*:*:*:*:*:*:*:*
mandrakesoft mandrake linux corporate server= 1.0.1nvdUScpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:*:*:*:*:*:*:*:*
mandrakesoft mandrake single network firewall= 7.2nvdUScpe:2.3:a:mandrakesoft:mandrake_single_network_firewall:*:*:*:*:*:*:*:*
openbsd openssh2.0 → 3.1nvdUScpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*

showing 20 of 32

also known as (8)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2002-03-15modified 2026-06-16

related (328)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2021-3156US	high7.8OT critical	100.0% (100th)	KEV	2021-01-26
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line arg…
CVE-2003-0466US	critical9.8	78.1% (100th)	Exploit	2003-08-27
Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 throug…
CVE-2022-3786US	high7.5	92.5% (100th)	Exploit	2022-11-01
A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification…
CVE-2021-23017US	high7.7	53.5% (99th)	Exploit	2021-06-01
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in…
CVE-2001-0609US	critical9.8	18.2% (97th)	Exploit	2001-08-02
Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog f…

+323 more

references (38)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan