CVE-2003-0693 A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corr...
HighCVSS 10.0
EPSS 11.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenBSD openssh | <= 3.7 | No fix listed |
| debian/openssh(Debian:12) | < 1:3.6.1p2-6.0 | 1:3.6.1p2-6.0 |
| debian/openssh(Debian:13) | < 1:3.6.1p2-6.0 | 1:3.6.1p2-6.0 |
| debian/openssh(Debian:14) | < 1:3.6.1p2-6.0 | 1:3.6.1p2-6.0 |
References
- 20030915 new ssh exploit? mailing-list
- 20030915 openssh remote exploit mailing-list
- 20030916 The lowdown on SSH vulnerability mailing-list
- 20030916 OpenSSH Buffer Management Bug Advisory mailing-list
- RHSA-2003:279 vendor-advisory
- 20030916 [slackware-security] OpenSSH Security Advisory (SSA:2003-259-01) mailing-list
- 2003-0033 vendor-advisory
- 20030917 [OpenPKG-SA-2003.040] OpenPKG Security Advisory (openssh) mailing-list
- 1000620 vendor-advisory
- CA-2003-24 third-party-advisory us-government-resource
- DSA-382 vendor-advisory
- DSA-383 vendor-advisory
- VU#333628 patch third-party-advisory us-government-resource
- MDKSA-2003:090 vendor-advisory
- www.openssh.com
- [oss-security] 20240701 CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems mailing-list
- RHSA-2003:280 vendor-advisory
- openssh-packet-bo(13191) vdb-entry
- oval:org.mitre.oval:def:2719 signature vdb-entry
- oval:org.mitre.oval:def:447 signature vdb-entry
- Debian Security Tracker CVE-2003-0693 vendor-advisory