p PatchFirst

CVE-2003-0787

CVE-2003-0787

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the stack and possibly gain privileges.

EPSS 1.8% · Fix available

Published
Updated

Stack: system · network

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • openssh Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:3.7.1p2

    Update to 1:3.7.1p2

  • openssh Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:3.7.1p2

    Update to 1:3.7.1p2

  • openssh Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:3.7.1p2

    Update to 1:3.7.1p2

Original sources

Check your server →