CVE-2003-0787

2003-11-1705:00:00

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0.009

Percentile

83.3%

JSON

The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the stack and possibly gain privileges.

Affected configurations

Nvd

Node

openbsdopensshMatch3.7.1

openbsdopensshMatch3.7.1p1

VendorProductVersionCPE
openbsdopenssh3.7.1cpe:2.3:a:openbsd:openssh:3.7.1:*:*:*:*:*:*:*
openbsdopenssh3.7.1p1cpe:2.3:a:openbsd:openssh:3.7.1p1:*:*:*:*:*:*:*