CVEvulnerability

CVE-2003-0786

10.0 HIGH Published 2003-11-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-11-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote attackers to gain privileges.

Affected configurations

• openbsd openssh 3.7.1 • openbsd openssh 3.7.1p1

References