PT-2003-1107 · Openssh+1 · Openssh+5
David Mirza Ahmad
·
Published
2003-09-16
·
Updated
2024-07-08
·
CVE-2003-0693
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
OpenSSH versions prior to 3.7
OpenSSH-server versions 3.1p1 through 3.4p1
OpenSSH-askpass versions 3.1p1 through 3.4p1
OpenSSH-askpass-gnome versions 3.1p1 through 3.4p1
OpenSSH-clients versions 3.1p1 through 3.4p1
Description
The issue is related to multiple vulnerabilities in OpenSSH, which can lead to disruption of confidentiality, integrity, and availability of protected information. Exploitation of these vulnerabilities can be done remotely. A "buffer management error" in buffer append space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap.
Recommendations
For OpenSSH versions prior to 3.7, update to version 3.7 or later.
For OpenSSH-server versions 3.1p1 through 3.4p1, update to version 3.7 or later.
For OpenSSH-askpass versions 3.1p1 through 3.4p1, update to version 3.7 or later.
For OpenSSH-askpass-gnome versions 3.1p1 through 3.4p1, update to version 3.7 or later.
For OpenSSH-clients versions 3.1p1 through 3.4p1, update to version 3.7 or later.
As a temporary workaround, consider restricting access to the vulnerable OpenSSH components until a patch is available.
Exploit
Fix
Side Channel Attack
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Openssh
Openssh-Askpass
Openssh-Askpass-Gnome
Openssh-Clients
Openssh-Server