Unscored severity · published Dec 31, 2002
CVE-2002-1646
SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication schemes (e.g
–
CVSS
3.6%
EPSS
No
On KEV
Description
SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication schemes (e.g. password) than configured for the server.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.6% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Secure Shell For Servers · Ssh
3.0; 3.0.1; 3.1; 3.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1646
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1646
Patch
http://archives.neohapsis.com/archives/bugtraq/2002-05/0204.html
www.ciac.org
http://www.ciac.org/ciac/bulletins/m-081.shtml
US Government Resource
http://www.kb.cert.org/vuls/id/341187
Patch
http://www.securityfocus.com/bid/4810
www.ssh.com
http://www.ssh.com/company/newsroom/article/201/
Patch
http://www.ssh.com/products/ssh/advisories/authentication.cfm