CVE-2003-0787

published 2003-11-17

CVE-2003-0787: The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the…

Priority P4 26 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the stack and possibly gain privileges.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
debian	openssh	< openssh 1:3.7.1p2 (bookworm)	openssh 1:3.7.1p2 (bookworm)
openbsd	openssh	—	—
openbsd	openssh	—	—
openbsd	openssh	>= 0 < 1:3.7.1p2	1:3.7.1p2
openbsd	openssh	>= 0 < 1:3.7.1p2	1:3.7.1p2
openbsd	openssh	>= 0 < 1:3.7.1p2	1:3.7.1p2
openbsd	openssh	>= 0 < 1:3.7.1p2	1:3.7.1p2

CVSS provenance

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

osv 7.5 HIGH

vendor_debian 7.5 HIGH

vendor_redhat 7.5 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.