p PatchFirst

CVE-2003-0786

CVE-2003-0786

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote attackers to gain privileges.

EPSS 3.6% · Fix available

Published
Updated

Stack: system · network

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • openssh Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:3.7.1p2

    Update to 1:3.7.1p2

  • openssh Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:3.7.1p2

    Update to 1:3.7.1p2

  • openssh Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:3.7.1p2

    Update to 1:3.7.1p2

Original sources

Check your server →