PT-2003-1878 · Openssh+1 · Openssh+1

Publicado

2003-09-25

·

Atualizado

2024-07-08

·

CVE-2003-0787

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: OpenSSH versions 3.7.1 through 3.7.1p1
Description: The issue concerns the PAM conversation function, which incorrectly interprets an array of structures as an array of pointers. This misinterpretation allows attackers to modify the stack, potentially leading to privilege escalation.
Recommendations: For OpenSSH versions 3.7.1 through 3.7.1p1, consider updating to a newer version to mitigate the risk, as the provided information does not specify a direct fix for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

ALT-PU-2024-3921
ALT-PU-2024-4077
ALT-PU-2024-4467
ALT-PU-2024-9513
CVE-2003-0787

Produtos afetados

Alt Linux
Openssh