CVE-2003-0693
- State
- Published
- Severity
- Not scored
- Published
- Sep 17, 2003
- Updated
- Aug 8, 2024
- Reserved
- Aug 14, 2003
Description
A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 1000620vendor-advisory
- 20030915 new ssh exploit?mailing-list
- 20030917 [OpenPKG-SA-2003.040] OpenPKG Security Advisory (openssh)mailing-list
- openssh-packet-bo(13191)vdb-entry
- DSA-383vendor-advisory
- 20030916 [slackware-security] OpenSSH Security Advisory (SSA:2003-259-01)mailing-list
- http://www.openssh.com/txt/buffer.adv
- RHSA-2003:280vendor-advisory
- CA-2003-24third-party-advisory
- 20030915 openssh remote exploitmailing-list
- oval:org.mitre.oval:def:2719vdb-entrysignature
- 2003-0033vendor-advisory
- 20030916 The lowdown on SSH vulnerabilitymailing-list
- DSA-382vendor-advisory
- 20030916 OpenSSH Buffer Management Bug Advisorymailing-list
- MDKSA-2003:090vendor-advisory
- oval:org.mitre.oval:def:447vdb-entrysignature
- RHSA-2003:279vendor-advisory
- VU#333628third-party-advisory
- [oss-security] 20240701 CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systemsmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.