VulnSocial

CVE-2002-0640PoC(openbsd / openssh)

LOWCVSS 10.0 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for openbsd openssh systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt).

openbsd CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Other references

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • openssh

Threat summary

  • Public PoC and exploit tooling are both present
  • 1 mentions across 1 observed day

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
openbsd
Products
openssh

26 versions affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-10: 1PoC Mentioned / Linked · 2026-06-10: 1Exploit Tool / Code · 2026-06-10: 1Technical Details · 2026-06-10: 106-10
Signal classification1 categories
PoC
1100.0%
Full discourse1 post
  • avrl ☘@avrldotdev
    PoC

    the vulnerability in OpenSSH (CVE-2002-0640) was exactly in this code snippet where attackers could exploit the heap & run arbitrary code & gain access to the servers. https://t.co/2b0IxvRqyQ

    Post summary

    The tweet shares a code snippet that demonstrates heap exploitation in OpenSSH (CVE‑2002‑0640), providing a PoC but no evidence of active exploitation or patches.

    0002653.8K
    7.8K followersView on X
CPE platform detail26 entries

26 of 26 entries

PartVendorProductVersionTarget SWTarget HW
Appopenbsdopenssh1.2.2--
Appopenbsdopenssh1.2.3--
Appopenbsdopenssh2.1--
Appopenbsdopenssh2.1.1--
Appopenbsdopenssh2.2--
Appopenbsdopenssh2.3--
Appopenbsdopenssh2.5--
Appopenbsdopenssh2.5.1--
Appopenbsdopenssh2.5.2--
Appopenbsdopenssh2.9--
Appopenbsdopenssh2.9.9--
Appopenbsdopenssh2.9p1--
Appopenbsdopenssh2.9p2--
Appopenbsdopenssh3.0--
Appopenbsdopenssh3.0.1--
Appopenbsdopenssh3.0.1p1--
Appopenbsdopenssh3.0.2--
Appopenbsdopenssh3.0.2p1--
Appopenbsdopenssh3.0p1--
Appopenbsdopenssh3.1--
Appopenbsdopenssh3.1p1--
Appopenbsdopenssh3.2--
Appopenbsdopenssh3.2.2p1--
Appopenbsdopenssh3.2.3p1--
Appopenbsdopenssh3.3--
Appopenbsdopenssh3.3p1--

Explore more

Back to dashboardopenbsd CVEsopenssh vulnerabilities