Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2003-0693

Published: 22/09/2003 Updated: 03/05/2018
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Openbsd

Vulnerability Summary

A "buffer management error" in buffer_append_space of buffer.c for OpenSSH prior to 3.7 may allow remote malicious users to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695.

Vulnerable Product Search on Vulmon Subscribe to Product

openbsd openssh

Vendor Advisories

Debian Security Advisories: DSA-383-2 ssh-krb5 -- possible remote vulnerability
Several bugs have been found in OpenSSH's buffer handling It is not known if these bugs are exploitable, but as a precaution an upgrade is advised DSA-383-2: This advisory is an addition to the earlier DSA-383-1 advisory: Solar Designer found four more bugs in OpenSSH that may be exploitable For the Debian stable distribution these bugs have bee ...
Cisco: OpenSSH Server Vulnerabilities
New vulnerabilities in the OpenSSH implementation for SSH servers have been announced An affected network device, running an SSH server based on the OpenSSH implementation, may be vulnerable to a Denial of Service (DoS) attack when an exploit script is repeatedly executed against the same device There are workarounds available to mi ...

References

NVD-CWE-Otherhttp://www.kb.cert.org/vuls/id/333628http://www.openssh.com/txt/buffer.advhttp://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010135.htmlhttp://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010146.htmlhttp://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010103.htmlhttp://www.redhat.com/support/errata/RHSA-2003-280.htmlhttp://www.debian.org/security/2003/dsa-382http://www.debian.org/security/2003/dsa-383http://www.cert.org/advisories/CA-2003-24.htmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2003:090http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000620.1-1http://marc.info/?l=bugtraq&m=106374466212309&w=2http://marc.info/?l=bugtraq&m=106373247528528&w=2http://marc.info/?l=bugtraq&m=106373546332230&w=2http://marc.info/?l=bugtraq&m=106381396120332&w=2http://marc.info/?l=bugtraq&m=106381409220492&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/13191https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A447https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2719https://nvd.nist.govhttps://www.debian.org/security/./dsa-383http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20030917-opensshhttps://www.kb.cert.org/vuls/id/333628
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook