CVE-2003-0695

OpenSSH < 3.7.1 - Denial of Service and Remote Code Execution via Buffer Management Errors

Title source: llm
STIX 2.1

Description

Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using (1) buffer_init in buffer.c, (2) buffer_free in buffer.c, or (3) a separate function in channels.c, a different vulnerability than CVE-2003-0693.

References (12)

Core 12
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=106381409220492&w=2
Patch, Vendor Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2003/dsa-383
Various Sources x_refsource_confirm
http://www.openssh.com/txt/buffer.adv
Patch, Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2003-280.html
Vendor Advisory vendor-advisory x_refsource_conectiva
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000741
Mailing List vendor-advisory x_refsource_trustix
http://marc.info/?l=bugtraq&m=106381396120332&w=2
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2003/dsa-382
Vendor Advisory vendor-advisory x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2003:090
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A452
Mailing List vendor-advisory x_refsource_redhat
http://marc.info/?l=bugtraq&m=106373546332230&w=2
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=106382542403716&w=2

Scores

EPSS 0.0101
EPSS Percentile 77.4%

Details

Status published
Products (1)
openbsd/openssh < 3.7.1
Published Oct 06, 2003
Tracked Since Feb 18, 2026