|
|
Log in / Subscribe / Register

openssh: multilple PAM vulnerabilities in Portable OpenSSH versions 3.7p1 and 3.7.1p1

Package(s):openssh CVE #(s):
Created:September 23, 2003 Updated:October 1, 2003
Description: Portable OpenSSH versions 3.7p1 and 3.7.1p1 contain multiple vulnerabilities in the new PAM code. At least one of these bugs is remotely exploitable (under a non-standard configuration, with privsep disabled). See this advisory for details.
Alerts:
Trustix 2003-0036 openssh 2003-09-27
Slackware SSA:2003-266-01 openssh 2003-09-24
OpenPKG OpenPKG-SA-2003.042 openssh 2003-09-24
Gentoo 200309-14 openssh 2003-09-23
to post comments

Red Hat not vulnerable

Posted Sep 26, 2003 20:09 UTC (Fri) by bjn (guest, #2179) [Link]

Note that Red Hat ships older versions of OpenSSH (with recent security fixes back-ported),
so it is not vulnerable to the problem(s) with the new PAM code in 3.7x


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds