OpenSSH: buffer management error [LWN.net]

Package(s):

OpenSSH

CVE #(s):

CAN-2003-0693

Created:

September 16, 2003

Updated:

September 30, 2003

Description:

All versions of OpenSSH's sshd prior to 3.7.1 contain a buffer management error. It is uncertain whether these errors are exploitable. Note that most distributors have issued two updates, since the first fix was found to be incomplete. See the second advisory for details.

CAN-2003-0693

Alerts:

SCO Group	CSSA-2003-027.0	2003-10-02
Debian	DSA-383-2	2003-09-21
Debian	DSA-382-3	2003-09-21
SuSE	SuSE-SA:2003:039	2003-09-18
EnGarde	ESA-20030918-024	2003-09-18
Yellow Dog	YDU-20030917-1	2003-09-17
Conectiva	CLA-2003:741	2003-09-17
Debian	DSA-383-1	2003-09-17
Sorcerer	SORCERER2003-09-17	2003-09-17
Slackware	SSA:2003-260-01	2003-09-17
Red Hat	RHSA-2003:279-02	2003-09-17
Mandrake	MDKSA-2003:090-1	2003-09-17
Trustix	2003-0033	2003-09-17
OpenPKG	OpenPKG-SA-2003.040	2003-09-17
Immunix	IMNX-2003-7+-020-02	2003-09-16
Gentoo	200309-12	2003-09-16
Debian	DSA-382-2	2003-09-17
SuSE	SuSE-SA:2003:038	2003-09-16
Slackware	SSA:2003-259-01	2003-09-16
Mandrake	MDKSA-2003:090	2003-09-16
Immunix	IMNX-2003-7+-020-01	2003-09-16
Debian	DSA-382-1	2003-09-16
Red Hat	RHSA-2003:279-01	2003-09-16
EnGarde	ESA-20030916-023	2003-09-16
Conectiva	CLA-2003:739	2003-09-16

(Log in to post comments)