VDB

GCVE-110-CERTCC-2003-602204

GCVE-110-CERTCC-2003-602204
Advisory Published
Vulnetix · Advisory published September 23, 2003
There is a vulnerability in the challenge authentication code of the Portable OpenSSH server when using the SSHv1 protocol and Pluggable Authentication Modules (PAM). This vulnerability could permit a remote attacker to log in to the system as any user, including potentially root, without using a password.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact18population5exploitation1widely_known15score_current6.58125ease_of_exploitation10

Aliases

CVE-2003-0786

Transitive aliases

EUVD-2003-0777DEBIAN-CVE-2003-0786GHSA-cm7j-g432-hx2jGSD-2003-0786

References

OpenSSH PAM challenge authentication failure
advisory
OpenSSH PAM challenge authentication failure
url
OpenSSH PAM challenge authentication failure
url

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›