CVE-2002-0575: OpenBSD OpenSSH

High severity, CVSS 7.5. EPSS: 4.2% chance of exploitation in the next 30 days.

Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and KerberosTgtPassing or AFSTokenPassing enabled, allows remote and local authenticated users to gain privileges.

Affected products

• OpenBSD OpenSSH: version 2.1 only; version 2.1.1 only; version 2.2 only; version 2.3 only; version 2.5 only; version 2.5.1 only; …

Published 2002-06-18. Last modified 2026-06-16.