CVE-2003-0693

A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695.

Affected products

Alt Linux, Openssh, Openssh-Askpass, Openssh-Askpass-Gnome, Openssh-Clients, Openssh-Server

Openbsd Openssh

≤ 3.7

Fix

Available

CVSS 2.0

10.0 HIGH

EPSS

11.4% (96th percentile)

NVD status

Modified

Published

2003-09-17