The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote attackers to gain privileges.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade openssh | Jul 30, 2024 | Nov 17, 2003 |
| Openbsd Openssh | — | Upgrade to the latest version of OpenSSH | Dec 5, 2012 | Nov 17, 2003 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub