Question 1

What is CVE-2003-0786?

Accepted Answer

CVE-2003-0786 is a high-severity software vulnerability with a CVSS score of 10. The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote attackers to gain privileges.

Question 2

Is CVE-2003-0786 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 3%.

Question 3

What products does CVE-2003-0786 affect?

Accepted Answer

Tracked products affected include OpenSSH. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2003-0786?

Accepted Answer

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

CVE-2003-0786

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information