Vulnerabilities > Openbsd > Openssh > 3.7.1

DATE CVE VULNERABILITY TITLE RISK
2003-11-17 CVE-2003-0787 Unspecified vulnerability in Openbsd Openssh 3.7.1/3.7.1P1
The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the stack and possibly gain privileges.
network
low complexity
openbsd
7.5
2003-11-17 CVE-2003-0786 Unspecified vulnerability in Openbsd Openssh 3.7.1/3.7.1P1
The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote attackers to gain privileges.
network
low complexity
openbsd
critical
10.0
2003-10-06 CVE-2003-0695 Unspecified vulnerability in Openbsd Openssh
Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using (1) buffer_init in buffer.c, (2) buffer_free in buffer.c, or (3) a separate function in channels.c, a different vulnerability than CVE-2003-0693.
network
low complexity
openbsd
7.5
2003-10-06 CVE-2003-0682 Remote Security vulnerability in OpenSSH
"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695.
network
low complexity
openbsd
7.5