CVE-2003-0786

The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote attackers to gain privileges.

Scoring

CVSS base score
0.13
EPSS probability
3.14%
Published
2003-09-25
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs