CVEvulnerability
CVE-2003-0724
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2003-10-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
ssh on HP Tru64 UNIX 5.1B and 5.1A does not properly handle RSA signatures when digital certificates and RSA keys are used, which could allow local and remote attackers to gain privileges.
Affected configurations
• compaq tru64 5.1a
• compaq tru64 5.1a pk1 bl1
• compaq tru64 5.1a pk2 bl2
• compaq tru64 5.1a pk3 bl3
• compaq tru64 5.1a pk4 bl21
• compaq tru64 5.1a pk5 bl23
• compaq tru64 5.1b pk2 bl22
References
- http://www.securityfocus.com/advisories/5736 Vendor Advisory
- http://www.securityfocus.com/bid/8492 Patch, Vendor Advisory
- http://www.securityfocus.com/advisories/5736 Vendor Advisory
- http://www.securityfocus.com/bid/8492 Patch, Vendor Advisory