PT-2003-1878 · Openssh+1 · Openssh+1
Published
2003-09-25
·
Updated
2024-07-08
·
CVE-2003-0787
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
OpenSSH versions 3.7.1 through 3.7.1p1
Description:
The issue concerns the PAM conversation function, which incorrectly interprets an array of structures as an array of pointers. This misinterpretation allows attackers to modify the stack, potentially leading to privilege escalation.
Recommendations:
For OpenSSH versions 3.7.1 through 3.7.1p1, consider updating to a newer version to mitigate the risk, as the provided information does not specify a direct fix for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Openssh