CVE-2003-0693: openbsd openssh

EPSS trend

Probability

11.42%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 11.42% on 18-09-2026

18-09-202618-10-2026

EPSS score

11.42%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

21 links

sunsolve.sun.com/search/document.do?assetkey=1-77-1000620.1-1Vendor Advisory
lists.grok.org.uk/pipermail/full-disclosure/2003-September/010103.htmlMailing List
marc.info?l=bugtraq&m=106381409220492&w=2Mailing List
exchange.xforce.ibmcloud.com/vulnerabilities/13191VDB Entry
www.debian.org/security/2003/dsa-383Vendor Advisory
marc.info?l=bugtraq&m=106374466212309&w=2Mailing List
www.openssh.com/txt/buffer.adv
www.redhat.com/support/errata/RHSA-2003-280.htmlVendor Advisory
www.cert.org/advisories/CA-2003-24.htmlThird Party AdvisoryUS Government Resource
lists.grok.org.uk/pipermail/full-disclosure/2003-September/010135.htmlMailing List

Show all 21 references

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2719VDB EntrySignature
marc.info?l=bugtraq&m=106381396120332&w=2Vendor Advisory
lists.grok.org.uk/pipermail/full-disclosure/2003-September/010146.htmlMailing List
www.debian.org/security/2003/dsa-382Vendor Advisory
marc.info?l=bugtraq&m=106373247528528&w=2Mailing List
www.mandriva.com/security/advisories?name=MDKSA-2003:090Vendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A447VDB EntrySignature
marc.info?l=bugtraq&m=106373546332230&w=2Vendor Advisory
www.kb.cert.org/vuls/id/333628Third Party AdvisoryPatchUS Government Resource
www.openwall.com/lists/oss-security/2024/07/01/3Mailing List
security-tracker.debian.org/tracker/CVE-2003-0693Advisory

Related vulnerabilities

CVE-2018-15919debianopenssh+83.56%8y ago28-08-2018 08:00Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or "oracle") as a vulnerability.'CVE-2018-15473alpineopenssh+7598.63%8y ago17-08-2018 00:00OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.CVE-2003-1562debianopenssh+15.57%18y ago04-08-2008 10:00sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190.CVE-2003-0695debianopenssh+13.79%23y ago18-09-2003 04:00Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using (1) buffer_init in buffer.c, (2) buffer_free in buffer.c, or (3) a separate function in channels.c, a different vulnerability than CVE-2003-0693.CVE-2003-0682debianopenssh+18.79%23y ago18-09-2003 04:00"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695.CVE-2003-0190debianopenssh+476.75%23y ago02-05-2003 00:00OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.

All vulnerabilities inopenssh

CVE-2003-0693: openbsd openssh

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References