PT-2003-1106 · Red Hat+2 · Red Hat+6

Published 2003-09-16 · Updated 2024-07-08 · CVE-2003-0682

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions openssh-server versions 3.1p1 through 3.4p1 openssh-askpass versions 3.1p1 through 3.4p1 openssh-askpass-gnome versions 3.1p1 through 3.4p1 openssh-clients versions 3.1p1 through 3.4p1 openssh versions 3.1p1 through 3.4p1

Description Multiple vulnerabilities in the openssh package of Red Hat Linux can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.

Recommendations For openssh-server versions 3.1p1 through 3.4p1, update to a newer version to mitigate the risk. For openssh-askpass versions 3.1p1 through 3.4p1, update to a newer version to mitigate the risk. For openssh-askpass-gnome versions 3.1p1 through 3.4p1, update to a newer version to mitigate the risk. For openssh-clients versions 3.1p1 through 3.4p1, update to a newer version to mitigate the risk. For openssh versions 3.1p1 through 3.4p1, update to a newer version to mitigate the risk.

Exploit

Fix

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

ALT-PU-2024-3921

ALT-PU-2024-4077

ALT-PU-2024-4467

ALT-PU-2024-9513

BDU:2015-08184

BDU:2015-08185

BDU:2015-08187

BDU:2015-08188

BDU:2015-08190

BDU:2015-08191

BDU:2015-08193

BDU:2015-08194

BDU:2015-08196

BDU:2015-08197

CVE-2003-0682

DSA-382

DSA-383

Affected Products

Alt Linux

Red Hat

Openssh

Openssh-Askpass

Openssh-Askpass-Gnome

Openssh-Clients

Openssh-Server

References · 361

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssh/ssh_enumusers.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssh/ssh_version.rb · Exploit
• 🔥 https://github.com/Rhynorater/CVE-2018-15473-Exploit · Exploit
• 🔥 https://github.com/zgzhang/cve-2024-6387-poc · Exploit
• 🔥 https://github.com/xaitax/CVE-2024-6387_Check · Exploit
• 🔥 https://github.com/acrono/cve-2024-6387-poc · Exploit
• 🔥 https://github.com/asterictnl-lvdw/CVE-2024-6387 · Exploit
• 🔥 https://github.com/cpandya2909/CVE-2020-15778 · Exploit
• 🔥 https://github.com/lflare/cve-2024-6387-poc · Exploit
• 🔥 https://github.com/epi052/cve-2018-15473 · Exploit
• 🔥 https://github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2016-6210 · Exploit
• 🔥 https://github.com/Christbowel/CVE-2023-25136 · Exploit
• 🔥 https://github.com/l0n3m4n/CVE-2024-6387 · Exploit
• 🔥 https://github.com/filipi86/CVE-2024-6387-Vulnerability-Checker · Exploit
• 🔥 https://github.com/vin01/poc-proxycommand-vulnerable · Exploit