CVE-2003-1120

Published: Dec 31, 2003Modified: Apr 16, 2026

3.7

Vector

AV:L/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 1.9 / Impact: 6.4

Source: NVD

Description

Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is enabled, allows local users to obtain the server's private key.

Affected (2)

Products: Ssh: Tectia Server

Ssh

1 product

Tectia Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ssh Tectia Server	Version 4.0.3
Ssh Tectia Server	Version 4.0.4

References (14)

http://secunia.com/advisories/11193

Source: cve@mitre.org

http://securitytracker.com/alerts/2004/Mar/1009532.html

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/814198

Source: cve@mitre.org

PatchThird Party AdvisoryUS Government Resource

http://www.osvdb.org/displayvuln.php?osvdb_id=4491

Source: cve@mitre.org

http://www.securityfocus.com/bid/9956

Source: cve@mitre.org

Patch

http://www.ssh.com/company/newsroom/article/520/

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/15585

Source: cve@mitre.org

http://secunia.com/advisories/11193