CVE-2003-0787

Published: Nov 17, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the stack and possibly gain privileges.

Affected (2)

Products: Openbsd: Openssh

Openbsd

1 product

Openssh

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openssh	Version 3.7.1
Openbsd Openssh	Version 3.7.1p1

References (12)

http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010812.html

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/209807

Source: cve@mitre.org

US Government Resource

http://www.openssh.com/txt/sshpam.adv

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/338616

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/338617

Source: cve@mitre.org

http://www.securityfocus.com/bid/8677

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010812.html