CVE-2003-0787 | BDVDB-2026-5897 Detail

Description#

The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the stack and possibly gain privileges.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.openssh.com/txt/sshpam.adv
http://www.securityfocus.com/bid/8677
http://www.kb.cert.org/vuls/id/209807
http://www.securityfocus.com/archive/1/338617
http://www.securityfocus.com/archive/1/338616
http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010812.html

Exploit#

No public exploit known

History#

Version 12003-09-25Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.