Vulnerability Note VU#209807

Portable OpenSSH server PAM conversion stack corruption

Overview

There is a vulnerability in the Portable OpenSSH server that may corrupt the PAM conversion stack.

I. Description

The Portable OpenSSH server contains a vulnerability that may permit an attacker to corrupt the PAM conversion stack. Versions 3.7p1 and 3.7.1p1 are affected. Note that the OpenBSD-specific releases are not affected by this issue.

II. Impact

The complete impact of this vulnerability is not yet known, but may lead to privilege escalation, or a denial of service.

III. Solution

OpenSSH has announced version 3.7.1p2 to resolve this issue.

This issue can be mitigated by not using PAM. Set "UsePAM no" in sshd_config.

Systems Affected

Vendor	Status	Date Notified	Date Updated
OpenSSH	Vulnerable	24-Sep-2003

References

http://marc.theaimsgroup.com/?l=openbsd-misc&m=106432248311634&w=2
http://www.openssh.com/txt/sshpam.adv

Credit

Thanks to OpenSSH for reporting this vulnerability.

This document was written by Jason A Rafail.

Other Information

Date Public:	2003-09-23
Date First Published:	2003-09-24
Date Last Updated:	2003-09-24
CERT Advisory:
CVE-ID(s):	CAN-2003-0787
NVD-ID(s):	CAN-2003-0787
US-CERT Technical Alerts:
Metric:	1.50
Document Revision:	2

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Get Adobe Reader