National Vulnerability Database (CVE-2003-0693)

National Cyber-Alert System Vulnerability Summary: CVE-2003-0693
Orirignal release date: 2003-09-22 Source: US-CERT/NIST ### Overview A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695. ### Impact CVSS Severity: 10 (High) Range: remote Authentication: input bound="1" Impact Type: sec_prot admin="1" user="1" other="1" ### Reference to Advisories, Solutions, and Tools External Source: The Aims Group Name: m=106373247528528& Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: netsys.com Name: [Full-Disclosure] openssh remote exploit Hyperlink: http://lists.netsys.com/pipermail/full-disclosure/2003-September/010154.html External Source: netsys.com Name: [Full-Disclosure] The lowdown on SSH vulnerability Hyperlink: http://lists.netsys.com/pipermail/full-disclosure/2003-September/010146.html External Source: CERT Name: Buffer Management Vulnerability in OpenSSH Hyperlink: http://www.kb.cert.org/vuls/id/333628 External Source: ISS X-Force Name: OpenSSH large packet buffer overflow Hyperlink: http://xforce.iss.net/xforce/xfdb/13191 External Source: BUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: CONFIRM Name: http://www.openssh.com/txt/buffer.adv Hyperlink: http://www.openssh.com/txt/buffer.adv External Source: FULLDISC Name: 20030915 openssh remote exploit Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010135.html External Source: FULLDISC Name: 20030916 The lowdown on SSH vulnerability Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010146.html External Source: FULLDISC Name: 20030915 new ssh exploit? Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010103.html External Source: REDHAT Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: REDHAT Name: RHSA-2003:280 Hyperlink: http://www.redhat.com/support/errata/RHSA-2003-280.html External Source: MANDRAKE Name: MDKSA-2003:090 Hyperlink: http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:090 External Source: DEBIAN Name: DSA-382 Hyperlink: http://www.debian.org/security/2003/dsa-382 External Source: DEBIAN Name: DSA-383 Hyperlink: http://www.debian.org/security/2003/dsa-383 External Source: BUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: BUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: TRUSTIX Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: CERT Name: CA-2003-24 Hyperlink: http://www.cert.org/advisories/CA-2003-24.html External Source: OVAL Name: OVAL2719 Hyperlink: http://oval.mitre.org/oval/definitions/data/oval2719.html External Source: OVAL Name: OVAL447 Hyperlink: http://oval.mitre.org/oval/definitions/data/oval447.html ### Vulnerable Software and Vendor OpenSSH (OpenSSH) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0693