Back to Database
Status published
High
CVE-2002-1715
SSH 1 through 3, and possibly other versions, allows local...
Vulnerability Description
SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-1715
Credits & Attribution
No credits recorded in the NVD database.
References
More from ssh
View All →CVE-2021-27893
SSH Tectia Client and Server before 6.4.19 on Windows allow...
High
7
CVE-2021-27892
SSH Tectia Client and Server before 6.4.19 on Windows allow...
High
7.8
CVE-2021-27891
SSH Tectia Client and Server before 6.4.19 on Windows have...
High
8.8
CVE-2012-5975
The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server...
Critical
9.3
CVE-2007-5616
ssh-signer in SSH Tectia Client and Server 5.x before 5.2.4,...
High
7.2
Affected Vendor
Affected Software
ssh, ssh2
Vulnerable Versions:
1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6, 1.2.7, 1.2.8, 1.2.9, 1.2.10, 1.2.11, 1.2.12, 1.2.13, 1.2.14, 1.2.15, 1.2.16, 1.2.17, 1.2.18, 1.2.19, 1.2.20, 1.2.21, 1.2.22, 1.2.23, 1.2.24, 1.2.25, 1.2.26, 1.2.27, 1.2.28, 1.2.29, 1.2.30, 1.2.31, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.1, 2.2, 2.3, 2.4, 2.5, 3.0
Timeline
Official Publish:
June 21st, 2005
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.