CVE-2003-0693

A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

11.42% chance of exploitation in the next 30 days, 96th percentile

Published

2003-09-17

Updated

2024-08-08

Proof-of-concept exploits (2)

• http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010103.html
• http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010135.html

References

• CVE Record
• NVD entry

Related

• CVE-2003-0686
• CVE-2003-0694
• CVE-2003-0681
• CVE-2003-0701
• CVE-2003-0666
• CVE-2003-0705