p PatchFirst

CVE-2003-0386

CVE-2003-0386

This page contains facts from public vulnerability sources. Check the original advisory before updating.

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address.

EPSS 5.8% · Fix available

Published
Updated

Stack: system · network

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • openssh Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:3.8p1-1

    Update to 1:3.8p1-1

  • openssh Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:3.8p1-1

    Update to 1:3.8p1-1

  • openssh Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:3.8p1-1

    Update to 1:3.8p1-1

Original sources

Check your server →