NVD

Id
73517  
Name
CVE-2003-0386  
Description
OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2003-07-02  
Modified Date
2010-08-21  
Seq
2003-0386  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
378486 73517 CVE-2003-0386 20060703-01-P  View
378487 73517 CVE-2003-0386 http://lists.apple.com/mhonarc/security-announce/msg00038.html  View
378488 73517 CVE-2003-0386 oval:org.mitre.oval:def:9894  View
378489 73517 CVE-2003-0386 http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm  View
378490 73517 CVE-2003-0386 VU#978316  View
378491 73517 CVE-2003-0386 RHSA-2006:0298  View
378492 73517 CVE-2003-0386 RHSA-2006:0698  View
378493 73517 CVE-2003-0386 20030605 OpenSSH remote clent address restriction circumvention  View
378494 73517 CVE-2003-0386 7831  View
378495 73517 CVE-2003-0386 http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html  View
378496 73517 CVE-2003-0386 http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63446 JVNDB-2003-000172 OpenSSH の AllowUsers 機能におけるアクセスコントロール違反の脆弱性 OpenSSH には、 AllowUsers 機能内でホスト名あるいは IP アドレスを指定している場合、DNS を用いた妥当性のチェックを行わずに、そのまま解釈する脆弱性が存在します。 CVE-2003-0386 7212 CVE-2003-0386 73517 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000172.html 2003-06-05 2007-04-01 View