CVE-2003-0786: Undefined Security Weakness

The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote attackers to gain privileges...

PT-2003-1877 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH versions 3.7.1 through 3.7.1p1 Description: The issue concerns the SSH1 PAM challenge response authentication mechanism in OpenSSH. When Privilege Separation is disabled, the authentication attempt result is not properly checked,...

Portable OpenSSH server PAM conversion stack corruption

Overview There is a vulnerability in the Portable OpenSSH server that may corrupt the PAM conversion stack. Description The Portable OpenSSH server contains a vulnerability that may permit an attacker to corrupt the PAM conversion stack. Versions 3.7p1 and 3.7.1p1 are affected. Note that the...

New OpenSSH packages

Upgraded OpenSSH 3.7.1p2 packages are available for Slackware 8.1, 9.0 and -current. This fixes security problems with PAM authentication. It also includes several code cleanups from Solar Designer. Slackware is not vulnerable to the PAM problem, and it is not believed that any of the other code...

Multiple PAM vulnerabilities in portable OpenSSH

Subject: Portable OpenSSH Security Advisory: sshpam.adv This document can be found at: http://www.openssh.com/txt/sshpam.adv 1. Versions affected: Portable OpenSSH versions 3.7p1 and 3.7.1p1 contain multiple vulnerabilities in the new PAM code. At least one of these bugs is remotely exploitable...

OpenSSH PAM challenge authentication failure

Overview There is a vulnerability in the challenge authentication code of the Portable OpenSSH server when using the SSHv1 protocol and Pluggable Authentication Modules PAM. This vulnerability could permit a remote attacker to log in to the system as any user, including potentially root, without...

OpenSSH < 3.7.1p2 Multiple Remote Vulnerabilities

According to its banner, the remote host appears to be running OpenSSH 3.7p1 or 3.7.1p1. These versions are vulnerable to a flaw in the way they handle PAM authentication when PrivilegeSeparation is disabled. Successful exploitation of this issue may allow an attacker to gain a shell on the remot...

Multiple OpenSSH PAM bugs

Multiple vulnerabilities...

DEBIAN-CVE-2003-0693

A "buffer management error" in bufferappendspace of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695...

CVE-2003-0693

A "buffer management error" in bufferappendspace of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695...

CVE-2003-0693

A "buffer management error" in bufferappendspace of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695...

[SECURITY] [DSA-383-2] OpenSSH buffer management fix

------------------------------------------------------------------------ Debian Security Advisory DSA-383-2 [email protected] http://www.debian.org/security/ Wichert Akkerman September 21, 2003 - ------------------------------------------------------------------------ Package : ssh-krb5...

[SECURITY] [DSA-382-3] OpenSSH buffer management fix

------------------------------------------------------------------------ Debian Security Advisory DSA-382-3 [email protected] http://www.debian.org/security/ Wichert Akkerman September 21, 2003 - ------------------------------------------------------------------------ Package : ssh...

CVE-2003-0695

OpenSSH prior to 3.7.1 contains multiple buffer management errors (in buffer_init/buffer_free and a separate channels.c function) that can allow a remote attacker to cause denial of service or potentially execute arbitrary code. The issue is associated with CVE-2003-0695; advisories indicate upgr...

CVE-2003-0682

"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695...

CVE-2003-0682

"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695...

CVE-2003-0695

Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using 1 bufferinit in buffer.c, 2 bufferfree in buffer.c, or 3 a separate function in channels.c, a different vulnerability than CVE-2003-0693...

CVE-2003-0695

Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using 1 bufferinit in buffer.c, 2 bufferfree in buffer.c, or 3 a separate function in channels.c, a different vulnerability than CVE-2003-0693...

CVE-2003-0682

CVE-2003-0682 is part of a set of OpenSSH memory/buffer handling bugs affecting OpenSSH 3.7.1 and earlier. Debian DSA advisories (DSA-382/383) tie CVE-2003-0682 to buffer handling vulnerabilities and recommend upgrading OpenSSH to address these issues; Slackware SSA 2003-266-01 notes OpenSSH 3.7....

CVE-2003-0695: Undefined Security Weakness

Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using 1 bufferinit in buffer.c, 2 bufferfree in buffer.c, or 3 a separate function in channels.c, a different vulnerability than CVE-2003-0693...