QwikSec

Security Database

CVE

CWE

Training

CVE-2002-1644

Published: Mar 28, 2005

Modified: Aug 8, 2024

PUBLISHED

Description

SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, does not call setsid to remove the child process from the process group of the parent process, which allows attackers to gain certain privileges.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

ssh-setsid-privilege-elevation(10710)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_BID

http://www.ssh.com/company/newsroom/article/286/

x_refsource_CONFIRM

third-party-advisory

x_refsource_CERT-VN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.