CVE-2003-0786 The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote atta...
HighCVSS 10.0
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote attackers to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenBSD openssh | = 3.7.1 | No fix listed |
| OpenBSD openssh | = 3.7.1p1 | No fix listed |
| debian/openssh(Debian:12) | < 1:3.7.1p2 | 1:3.7.1p2 |
| debian/openssh(Debian:13) | < 1:3.7.1p2 | 1:3.7.1p2 |
| debian/openssh(Debian:14) | < 1:3.7.1p2 | 1:3.7.1p2 |
References
- 20030924 [OpenPKG-SA-2003.042] OpenPKG Security Advisory (openssh) mailing-list
- VU#602204 third-party-advisory us-government-resource
- www.openssh.com
- 20030923 Portable OpenSSH 3.7.1p2 released mailing-list
- 20030923 Multiple PAM vulnerabilities in portable OpenSSH mailing-list
- 8677 vdb-entry
- Debian Security Tracker CVE-2003-0786 vendor-advisory