NVD Vulnerability Detail
Search Exploit, PoC
CVE-2002-1715
Summary

SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access.

Publication Date Dec. 31, 2002, 2 p.m.
Registration Date Jan. 29, 2021, 6:04 p.m.
Last Update July 11, 2017, 10:29 a.m.
CVSS2.0 : HIGH
Score 7.2
Vector AV:L/AC:L/Au:N/C:C/I:C/A:C
攻撃元区分(AV) ローカル
攻撃条件の複雑さ(AC) 低
攻撃前の認証要否(Au) 不要
機密性への影響(C) 高
完全性への影響(I) 高
可用性への影響(A) 高
Get all privileges. はい
Get user privileges いいえ
Get other privileges いいえ
User operation required いいえ
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:a:ssh:ssh:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.3:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.4:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.5:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.6:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.7:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.8:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.9:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.10:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.11:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.12:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.13:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.14:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.15:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.16:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.17:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.18:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.19:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.20:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.21:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.22:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.23:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.24:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.25:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.26:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.28:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.29:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.30:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh:1.2.31:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.0:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.0.7:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.0.8:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.0.9:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.0.10:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.0.11:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.0.12:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.0.13:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.1:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.2:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.3:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.4:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:2.5:*:*:*:*:*:*:*
cpe:2.3:a:ssh:ssh2:3.0:*:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List