vulnwire
7.5high

CVE-2003-0787

The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attacker…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.8%
percentile 78%
Public exploits
0
none known

The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the stack and possibly gain privileges.

Exploit prediction (EPSS)

1.77% probability of exploitation in the next 30 days, higher than 78% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • openssh.com /txt/sshpam.adv · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /bid/8677 · vdb-entry, x_refsource_BID, x_transferred
  • kb.cert.org /vuls/id/209807 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • securityfocus.com /archive/1/338617 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /archive/1/338616 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • lists.grok.org.uk /pipermail/full-disclosure/2003-September/010812.html · mailing-list, x_refsource_FULLDISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.