Explain CVE-2003-0693
A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695.
Affected Products: n/a
References: [{'name': '1000620', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000620.1-1'}, {'name': '20030915 new ssh exploit?', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010103.html'}, {'name': '20030917 [OpenPKG-SA-2003.040] OpenPKG Security Advisory (openssh)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106381409220492&w=2'}, {'name': 'openssh-packet-bo(13191)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13191'}, {'name': 'DSA-383', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-383'}, {'name': '20030916 [slackware-security]  OpenSSH Security Advisory (SSA:2003-259-01)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106374466212309&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openssh.com/txt/buffer.adv'}, {'name': 'RHSA-2003:280', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-280.html'}, {'name': 'CA-2003-24', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2003-24.html'}, {'name': '20030915 openssh remote exploit', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010135.html'}, {'name': 'oval:org.mitre.oval:def:2719', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2719'}, {'name': '2003-0033', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://marc.info/?l=bugtraq&m=106381396120332&w=2'}, {'name': '20030916 The lowdown on SSH vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010146.html'}, {'name': 'DSA-382', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-382'}, {'name': '20030916 OpenSSH Buffer Management Bug Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106373247528528&w=2'}, {'name': 'MDKSA-2003:090', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:090'}, {'name': 'oval:org.mitre.oval:def:447', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A447'}, {'name': 'RHSA-2003:279', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://marc.info/?l=bugtraq&m=106373546332230&w=2'}, {'name': 'VU#333628', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/333628'}]
CVE State: PUBLISHED