NVD

Id
73891  
Name
CVE-2003-0786  
Description
The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote attackers to gain privileges.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2003-11-17  
Modified Date
2008-09-10  
Seq
2003-0786  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
379881 73891 CVE-2003-0786 20030924 [OpenPKG-SA-2003.042] OpenPKG Security Advisory (openssh)  View
379882 73891 CVE-2003-0786 VU#602204  View
379883 73891 CVE-2003-0786 http://www.openssh.com/txt/sshpam.adv  View
379884 73891 CVE-2003-0786 20030923 Portable OpenSSH 3.7.1p2 released  View
379885 73891 CVE-2003-0786 20030923 Multiple PAM vulnerabilities in portable OpenSSH  View
379886 73891 CVE-2003-0786 8677  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63557 JVNDB-2003-000283 OpenSSH の PAM 認証におけるログイン認証を回避される脆弱性 OpenSSH には PAM 認証を使用してのチャレンジ / レスポンス認証の実装の不備により、空のパスワードを使用した場合、ログイン認証を回避可能な脆弱性が存在します。 CVE-2003-0786 7609 CVE-2003-0786 73891 10 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000283.html 2003-09-23 2007-04-01 View