CVE-2003-1120 Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is enabled, allows local users to obtain the server's private key.
LowCVSS 3.7
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is enabled, allows local users to obtain the server's private key.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ssh tectia server | = 4.0.3 | No fix listed |
| ssh tectia server | = 4.0.4 | No fix listed |
References
- 11193 third-party-advisory
- 1009532 vdb-entry
- VU#814198 patch third-party-advisory us-government-resource
- 4491 vdb-entry
- 9956 patch vdb-entry
- www.ssh.com patch
- sshtectiaserver-passwdplugin-race-condition(15585) vdb-entry