Vulnerability in Ssh Ssh2
CVE-2002-1644
SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, does not call setsid to remove the child process from the process group of the parent process, which allows attackers to gain certain privileges.
EPSS: 0.004 (36.5th percentile) — read the EPSS interpretation.
Affected products
- Ssh Ssh2 — versions 2.0.13, 2.1, 2.2
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, third-party-advisory)