OpenSSH Buffer Mismanagement Vulnerabilities

Bugtraq ID:	8628
Class:	Boundary Condition Error
CVE:	CVE-2003-0693
Remote:	Yes
Local:	No
Published:	Sep 16 2003 12:00AM
Updated:	Nov 05 2009 11:47PM
Credit:	These issues were reportedly discovered by Mark Dowd, the OpenSSH team and Solar Designer.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9 Sun Cobalt RaQ 550 Stonesoft StoneGate 2.2.1 Stonesoft StoneGate 2.2 Stonesoft StoneGate 2.1 Stonesoft StoneGate 2.0.9 Stonesoft StoneGate 2.0.8 Stonesoft StoneGate 2.0.7 Stonesoft StoneGate 2.0.6 Stonesoft StoneGate 2.0.5 Stonesoft StoneGate 2.0.4 Stonesoft StoneGate 2.0.1 Stonesoft StoneGate 1.7.2 Stonesoft StoneGate 1.7.1 Stonesoft StoneGate 1.7 Stonesoft StoneGate 1.6.3 Stonesoft StoneGate 1.6.2 Stonesoft StoneGate 1.5.18 Stonesoft StoneGate 1.5.17 Snapgear Snapgear OS 1.8.4 SGI IRIX 6.5.22 SGI IRIX 6.5.21 m SGI IRIX 6.5.21 f SGI IRIX 6.5.21 SGI IRIX 6.5.20 m SGI IRIX 6.5.20 f SGI IRIX 6.5.20 SGI IRIX 6.5.19 m SGI IRIX 6.5.19 f SGI IRIX 6.5.19 SCO Open Server 5.0.7 RedHat openssh-server-3.5p1-6.i386.rpm RedHat openssh-server-3.4p1-2.i386.rpm + RedHat Linux 8.0 i386 RedHat openssh-server-3.1p1-3.i386.rpm RedHat openssh-server-2.9p2-7.ia64.rpm RedHat openssh-server-2.9p2-7.i386.rpm RedHat openssh-server-2.5.2p2-5.i386.rpm RedHat openssh-clients-3.5p1-6.i386.rpm + RedHat Linux 9.0 i386 RedHat openssh-clients-3.4p1-2.i386.rpm + RedHat Linux 8.0 i386 RedHat openssh-clients-3.1p1-3.i386.rpm RedHat openssh-clients-2.9p2-7.ia64.rpm + RedHat Linux 7.2 ia64 RedHat openssh-clients-2.9p2-7.i386.rpm RedHat openssh-clients-2.5.2p2-5.i386.rpm RedHat openssh-askpass-gnome-3.5p1-6.i386.rpm RedHat openssh-askpass-gnome-3.4p1-2.i386.rpm RedHat openssh-askpass-gnome-3.1p1-3.i386.rpm RedHat openssh-askpass-gnome-2.9p2-7.ia64.rpm RedHat openssh-askpass-gnome-2.9p2-7.i386.rpm RedHat openssh-askpass-gnome-2.5.2p2-5.i386.rpm + RedHat Linux 7.1 RedHat openssh-askpass-3.5p1-6.i386.rpm RedHat openssh-askpass-3.4p1-2.i386.rpm RedHat openssh-askpass-3.1p1-3.i386.rpm RedHat openssh-askpass-2.9p2-7.ia64.rpm RedHat openssh-askpass-2.9p2-7.i386.rpm RedHat openssh-askpass-2.5.2p2-5.i386.rpm RedHat openssh-3.5p1-6.i386.rpm + RedHat Linux 9.0 i386 RedHat openssh-3.4p1-2.i386.rpm RedHat openssh-3.1p1-3.i386.rpm + RedHat Linux 7.3 i386 RedHat openssh-2.9p2-7.ia64.rpm + RedHat Linux 7.2 ia64 RedHat openssh-2.9p2-7.i386.rpm + RedHat Linux 7.2 RedHat openssh-2.5.2p2-5.i386.rpm OpenSSH OpenSSH 3.7 p1 OpenSSH OpenSSH 3.7 OpenSSH OpenSSH 3.6.1 p2 + MandrakeSoft Corporate Server 2.1 x86_64 + MandrakeSoft Corporate Server 2.1 + MandrakeSoft Multi Network Firewall 2.0 + Mandriva Linux Mandrake 9.1 ppc + Mandriva Linux Mandrake 9.1 + Mandriva Linux Mandrake 9.0 + Mandriva Linux Mandrake 8.2 ppc + Mandriva Linux Mandrake 8.2 + Trustix Secure Linux 2.0 OpenSSH OpenSSH 3.6.1 p1 OpenSSH OpenSSH 3.6.1 OpenSSH OpenSSH 3.5 p1 OpenSSH OpenSSH 3.5 OpenSSH OpenSSH 3.4 p1-1 OpenSSH OpenSSH 3.4 p1 OpenSSH OpenSSH 3.4 OpenSSH OpenSSH 3.3 p1 OpenSSH OpenSSH 3.3 OpenSSH OpenSSH 3.2.3 p1 OpenSSH OpenSSH 3.2.2 p1 OpenSSH OpenSSH 3.2 OpenSSH OpenSSH 3.1 p1 OpenSSH OpenSSH 3.1 OpenSSH OpenSSH 3.0.2 p1 OpenSSH OpenSSH 3.0.2 OpenSSH OpenSSH 3.0.1 p1 OpenSSH OpenSSH 3.0.1 OpenSSH OpenSSH 3.0 p1 OpenSSH OpenSSH 3.0 OpenSSH OpenSSH 2.9.9 + NetBSD NetBSD 1.5.2 + S.u.S.E. Linux 7.3 sparc + S.u.S.E. Linux 7.3 ppc + S.u.S.E. Linux 7.3 i386 + S.u.S.E. Linux 7.2 OpenBSD OpenBSD 3.3 OpenBSD OpenBSD 3.2 NetBSD NetBSD 1.6.1 NetBSD NetBSD 1.6 NetBSD NetBSD 1.5.3 NetBSD NetBSD 1.5.2 NetBSD NetBSD 1.5.1 NetBSD NetBSD 1.5 NetApp SecureAdmin for NetCache 5.5 NetApp SecureAdmin 3.0 Foundry Networks ServerIronXL/G Foundry Networks ServerIronXL Foundry Networks ServerIron800 Foundry Networks ServerIron400 Foundry Networks ServerIron 7.1 .09 Foundry Networks ServerIron 6.0 Foundry Networks ServerIron 5.1.10 t12 Foundry Networks Ironview Foundry Networks FastIron 7.1 .09 Foundry Networks EdgeIron 4802F 0 Foundry Networks BigIron 7.1 .09 F-Secure SSH 1.3.14 Cray Cray Open Software 3.0 Cisco WebNS 7.2 0.0.03 Cisco WebNS 7.1 0.2.06 + Cisco CSS11000 Content Services Switch + Cisco CSS11050 Content Services Switch + Cisco CSS11150 Content Services Switch + Cisco CSS11501 Content Services Switch + Cisco CSS11503 Content Services Switch + Cisco CSS11506 Content Services Switch + Cisco CSS11800 Content Services Switch Cisco WebNS 7.1 0.1.02 Cisco WebNS 6.10 B4 Cisco WebNS 6.10 Cisco SN 5428 Storage Router SN5428-3.3.2-K9 Cisco SN 5428 Storage Router SN5428-3.3.1-K9 Cisco SN 5428 Storage Router SN5428-3.2.2-K9 Cisco SN 5428 Storage Router SN5428-3.2.1-K9 Cisco SN 5428 Storage Router SN5428-2.5.1-K9 Cisco SN 5428 Storage Router SN5428-2-3.3.2-K9 Cisco SN 5428 Storage Router SN5428-2-3.3.1-K9 Cisco Secure Intrusion Detection System (NetRanger) 0 Cisco PGW2200 Softswitch Cisco GSS 4480 Global Site Selector Cisco CSS11800 Content Services Switch Cisco CSS11506 Content Services Switch Cisco CSS11503 Content Services Switch Cisco CSS11501 Content Services Switch Cisco CSS11150 Content Services Switch Cisco CSS11050 Content Services Switch Cisco CSS11000 Content Services Switch Cisco CiscoWorks 1105 Wireless LAN Solution Engine Cisco CiscoWorks 1105 Hosting Solution Engine Cisco CatOS 7.6 (1) Cisco CatOS 7.6 Cisco CatOS 7.5 (1) Cisco CatOS 7.5 Cisco CatOS 7.4 (3) Cisco CatOS 7.4 (2) Cisco CatOS 7.4 (1) Cisco CatOS 7.4 (0.63) Cisco CatOS 7.4 (0.2)CLR Cisco CatOS 7.4 Cisco CatOS 7.3 (2) Cisco CatOS 7.3 (1) Cisco CatOS 7.3 Cisco CatOS 7.2 (2) Cisco CatOS 7.2 (1) Cisco CatOS 7.2 (0.65) Cisco CatOS 7.1 (2a) Cisco CatOS 7.1 (2) Cisco CatOS 7.1 (1a) Cisco CatOS 7.1 (1) Cisco CatOS 6.4 (3) Cisco CatOS 6.4 (2) Cisco CatOS 6.4 (1) Cisco CatOS 6.3 (9) Cisco CatOS 6.3 (8.3) Cisco CatOS 6.3 (8) Cisco CatOS 6.3 (7) Cisco CatOS 6.3 (6) Cisco CatOS 6.3 (5.10) Cisco CatOS 6.3 (5) Cisco CatOS 6.3 (4a) Cisco CatOS 6.3 (4) Cisco CatOS 6.3 (3a) Cisco CatOS 6.3 (3)x1 Cisco CatOS 6.3 (3)x Cisco CatOS 6.3 (3) Cisco CatOS 6.3 (2a) Cisco CatOS 6.3 (2) Cisco CatOS 6.3 (1a) Cisco CatOS 6.3 (10) Cisco CatOS 6.3 (1) Cisco CatOS 6.2 (3a) Cisco CatOS 6.2 (3) Cisco CatOS 6.2 (2a) Cisco CatOS 6.2 (2) Cisco CatOS 6.2 (1a) Cisco CatOS 6.2 (1) Cisco CatOS 6.1 (4b) Cisco CatOS 6.1 (4) Cisco CatOS 6.1 (3a) Cisco CatOS 6.1 (3) Cisco CatOS 6.1 (2a) Cisco CatOS 6.1 (2) Cisco CatOS 6.1 (1e) Cisco CatOS 6.1 (1d) Cisco CatOS 6.1 (1c) Cisco CatOS 6.1 (1b) Cisco CatOS 6.1 (1a) Cisco CatOS 6.1 (1) Cisco CatOS 6.1 Cisco CatOS 5.5 (9) Cisco CatOS 5.5 (8a)CV Cisco CatOS 5.5 (8a) Cisco CatOS 5.5 (8) Cisco CatOS 5.5 (7a) Cisco CatOS 5.5 (7) Cisco CatOS 5.5 (6a) Cisco CatOS 5.5 (6) Cisco CatOS 5.5 (5) Cisco CatOS 5.5 (4b) Cisco CatOS 5.5 (4a) Cisco CatOS 5.5 (4) Cisco CatOS 5.5 (3) Cisco CatOS 5.5 (2) Cisco CatOS 5.5 (1a) Cisco CatOS 5.5 (19) Cisco CatOS 5.5 (18) Cisco CatOS 5.5 (17) Cisco CatOS 5.5 (16.2) Cisco CatOS 5.5 (16) Cisco CatOS 5.5 (15) Cisco CatOS 5.5 (14) Cisco CatOS 5.5 (13a) Cisco CatOS 5.5 (13.5) Cisco CatOS 5.5 (13) Cisco CatOS 5.5 (12a) Cisco CatOS 5.5 (12) Cisco CatOS 5.5 (11a) Cisco CatOS 5.5 (11) Cisco CatOS 5.5 (10a) Cisco CatOS 5.5 (10) Cisco CatOS 5.5 (1) Cisco CatOS 5.5 Cisco CatOS 5.4 (4a) Cisco CatOS 5.4 (4) Cisco CatOS 5.4 (3) Cisco CatOS 5.4 (2a) Cisco CatOS 5.4 (2) Cisco CatOS 5.4 (1) Cisco CatOS 5.4 Cisco CatOS 5.3 (6a)CSX Cisco CatOS 5.3 (6)CSX Cisco CatOS 5.3 (5a)CSX Cisco CatOS 5.3 (5)CSX Cisco CatOS 5.3 (4)CSX Cisco CatOS 5.3 (3)CSX Cisco CatOS 5.3 (2)CSX Cisco CatOS 5.3 (1a)CSX Cisco CatOS 5.2 (7a) Cisco CatOS 5.2 (7) Cisco CatOS 5.2 (6) Cisco CatOS 5.2 (5) Cisco CatOS 5.2 (4) Cisco CatOS 5.2 (3a)CSX Cisco CatOS 5.2 (3)CSX Cisco CatOS 5.2 (3) Cisco CatOS 5.2 (2)CSX Cisco CatOS 5.2 (2) Cisco CatOS 5.2 (1)CSX Cisco CatOS 5.2 (1) Cisco CatOS 5.1 (2b) Cisco CatOS 5.1 (2a) Cisco CatOS 5.1 (1a)CSX Cisco CatOS 5.1 (1a) Cisco CatOS 5.1 (1)CSX Cisco CatOS 5.1 (1) Cisco CatOS 4.5 (9) Cisco CatOS 4.5 (8) Cisco CatOS 4.5 (7) Cisco CatOS 4.5 (6a) Cisco CatOS 4.5 (6) Cisco CatOS 4.5 (5) Cisco CatOS 4.5 (4) Cisco CatOS 4.5 (3) Cisco CatOS 4.5 (2) Cisco CatOS 4.5 (13a) Cisco CatOS 4.5 (13) Cisco CatOS 4.5 (12a) Cisco CatOS 4.5 (12) Cisco CatOS 4.5 (11) Cisco CatOS 4.5 (10) Cisco CatOS 4.5 (1) Cisco CatOS 4.4 (1) Cisco CatOS 4.3 (1a) Cisco CatOS 4.2 (2) Cisco CatOS 4.2 (1) Cisco CatOS 4.1 (3) Cisco CatOS 4.1 (2) Cisco CatOS 4.1 (1) Cisco Catalyst 7600 3.1 (1a)WS-X6380-NAM Cisco Catalyst 7600 3.1 (1a)WS-SVC-NAM-2 Cisco Catalyst 7600 3.1 (1a)WS-SVC-NAM-1 Cisco Catalyst 7600 2.2 (1a)WS-SVC-NAM-2 Cisco Catalyst 7600 2.2 (1a)WS-SVC-NAM-1 Cisco Catalyst 7600 2.1 (2)WS-X6380-NAM Cisco Catalyst 6500 3.1 (1a)WS-X6380-NAM Cisco Catalyst 6500 3.1 (1a)WS-SVC-NAM-2 Cisco Catalyst 6500 3.1 (1a)WS-SVC-NAM-1 Cisco Catalyst 6500 2.2 (1a)WS-SVC-NAM-2 Cisco Catalyst 6500 2.2 (1a)WS-SVC-NAM-1 Cisco Catalyst 6500 2.1 (2)WS-X6380-NAM Cisco Catalyst 6000 7.6 (1) Cisco Catalyst 6000 7.5 (1) Cisco Catalyst 6000 7.1 (2) Cisco Catalyst 6000 7.1 Cisco Catalyst 6000 6.3 (4) Cisco Catalyst 6000 6.3 (0.7)PAN Cisco Catalyst 6000 6.2 (0.111) Cisco Catalyst 6000 6.2 (0.110) Cisco Catalyst 6000 6.1 (2.13) Cisco Catalyst 6000 6.1 (1c) Cisco Catalyst 6000 6.1 (1b) Cisco Catalyst 6000 6.1 (1a) Cisco Catalyst 6000 6.1 (1) Cisco Catalyst 6000 5.5 (4b) Cisco Catalyst 6000 5.5 (4a) Cisco Catalyst 6000 5.5 (4) Cisco Catalyst 6000 5.5 (3) Cisco Catalyst 6000 5.5 (2) Cisco Catalyst 6000 5.5 (13) Cisco Catalyst 6000 5.5 (1) Cisco Catalyst 6000 5.5 Cisco Catalyst 6000 5.4.1 Cisco Catalyst 6000 5.4 (4) Cisco Catalyst 6000 5.4 (3) Cisco Catalyst 6000 5.4 (2) Cisco Catalyst 6000 5.4 (1) Cisco Catalyst 6000 5.4 Cisco Catalyst 6000 5.3 (6)CSX Cisco Catalyst 6000 5.3 (5a)CSX Cisco Catalyst 6000 5.3 (5)CSX Cisco Catalyst 6000 5.3 (4)CSX Cisco Catalyst 6000 5.3 (3)CSX Cisco Catalyst 6000 5.3 (2)CSX Cisco Catalyst 6000 5.3 (1a)CSX Cisco Catalyst 6000 5.3 (1)CSX Cisco Catalyst 6000 3.1 (1a)WS-X6380-NAM Cisco Catalyst 6000 3.1 (1a)WS-SVC-NAM-2 Cisco Catalyst 6000 3.1 (1a)WS-SVC-NAM-1 Cisco Catalyst 6000 2.2 (1a)WS-SVC-NAM-2 Cisco Catalyst 6000 2.2 (1a)WS-SVC-NAM-1 Cisco Catalyst 6000 2.1 (2)WS-X6380-NAM Cisco Catalyst 5000 6.3 (4) Cisco Catalyst 5000 6.1 (3) Cisco Catalyst 5000 6.1 (2) Cisco Catalyst 5000 6.1 (1c) Cisco Catalyst 5000 6.1 (1b) Cisco Catalyst 5000 6.1 (1a) Cisco Catalyst 5000 6.1 (1) Cisco Catalyst 5000 5.5 (7) Cisco Catalyst 5000 5.5 (6) Cisco Catalyst 5000 5.5 (4b) Cisco Catalyst 5000 5.5 (4) Cisco Catalyst 5000 5.5 (3) Cisco Catalyst 5000 5.5 (2) Cisco Catalyst 5000 5.5 (13) Cisco Catalyst 5000 5.5 (1) Cisco Catalyst 5000 5.4.1 Cisco Catalyst 5000 5.4 (4) Cisco Catalyst 5000 5.4 (3) Cisco Catalyst 5000 5.4 (2) Cisco Catalyst 5000 5.4 (1) Cisco Catalyst 5000 5.2 (4) Cisco Catalyst 5000 5.2 (3) Cisco Catalyst 5000 5.2 (2) Cisco Catalyst 5000 5.2 (1) Cisco Catalyst 5000 5.2 Cisco Catalyst 5000 5.1 (2a) Cisco Catalyst 5000 5.1 (1) Cisco Catalyst 5000 5.1 Cisco Catalyst 5000 4.5 (9) Cisco Catalyst 5000 4.5 (8) Cisco Catalyst 5000 4.5 (7) Cisco Catalyst 5000 4.5 (6) Cisco Catalyst 5000 4.5 (5) Cisco Catalyst 5000 4.5 (4b) Cisco Catalyst 5000 4.5 (4) Cisco Catalyst 5000 4.5 (3) Cisco Catalyst 5000 4.5 (2) Cisco Catalyst 5000 4.5 (13a) Cisco Catalyst 5000 4.5 (12) Cisco Catalyst 5000 4.5 (11) Cisco Catalyst 5000 4.5 (10) Cisco Catalyst 5000 Cisco Catalyst 4912G Cisco Catalyst 4000 7.6 (1) Cisco Catalyst 4000 7.5 (1) Cisco Catalyst 4000 7.1.2 Cisco Catalyst 4000 7.1 (2) Cisco Catalyst 4000 7.1 Cisco Catalyst 4000 6.3.5 Cisco Catalyst 4000 6.3 (4) Cisco Catalyst 4000 6.1 (1c) Cisco Catalyst 4000 6.1 (1b) Cisco Catalyst 4000 6.1 (1a) Cisco Catalyst 4000 6.1 (1) Cisco Catalyst 4000 5.5.5 Cisco Catalyst 4000 5.5 (4b) Cisco Catalyst 4000 5.5 (4) Cisco Catalyst 4000 5.5 (3) Cisco Catalyst 4000 5.5 (2) Cisco Catalyst 4000 5.5 (13) Cisco Catalyst 4000 5.5 (1) Cisco Catalyst 4000 5.5 Cisco Catalyst 4000 5.4.1 Cisco Catalyst 4000 5.4 (3) Cisco Catalyst 4000 5.4 (2) Cisco Catalyst 4000 5.4 (1) Cisco Catalyst 4000 5.4 Cisco Catalyst 4000 5.2 (7) Cisco Catalyst 4000 5.2 (6) Cisco Catalyst 4000 5.2 (5) Cisco Catalyst 4000 5.2 (4) Cisco Catalyst 4000 5.2 (2) Cisco Catalyst 4000 5.2 (1a) Cisco Catalyst 4000 5.2 (1) Cisco Catalyst 4000 5.2 Cisco Catalyst 4000 5.1 (2a) Cisco Catalyst 4000 5.1 (1a) Cisco Catalyst 4000 5.1 (1) Cisco Catalyst 4000 5.1 Cisco Catalyst 4000 4.5 (9) Cisco Catalyst 4000 4.5 (8) Cisco Catalyst 4000 4.5 (7) Cisco Catalyst 4000 4.5 (6) Cisco Catalyst 4000 4.5 (5) Cisco Catalyst 4000 4.5 (4b) Cisco Catalyst 4000 4.5 (4) Cisco Catalyst 4000 4.5 (3) Cisco Catalyst 4000 4.5 (2) Cisco Catalyst 4000 4.5 (10) Cisco Catalyst 4000 Cisco Catalyst 2948G Cisco Catalyst 2900 5.5 (13) Cisco Catalyst 2980G-A Cisco Catalyst 2980G Caldera OpenLinux Workstation 3.1.1 Caldera OpenLinux Server 3.1.1 Blue Coat Systems SGME 2.1.6 Blue Coat Systems SG2 Secure Proxy 0 Blue Coat Systems Security Gateway OS 3.1 Blue Coat Systems Security Gateway OS 2.1.5001 SP1 Blue Coat Systems Security Gateway OS 2.1.9 Blue Coat Systems ProxySG 0 Blue Coat Systems CacheOS CA/SA 4.1.10
Not Vulnerable:	Snapgear Snapgear OS 1.8.5 SGI IRIX 6.5.22 OpenSSH OpenSSH 3.7.1 p1 + SCO Open Server 5.0.7 OpenSSH OpenSSH 3.7.1 OpenSSH OpenSSH 3.7 p1 OpenSSH OpenSSH 3.7 F-Secure SSH 1.3.15 Cisco CatOS 8.1 (3)

OpenSSH Buffer Mismanagement Vulnerabilities

Although these issues are not believed to be exploitable to execute arbitrary code, there are rumors of exploits circulating in the wild.

OpenSSH Buffer Mismanagement Vulnerabilities

Solution:
Fixes are available. Please see the references for details.


RedHat openssh-2.9p2-7.i386.rpm

• Red Hat openssh-3.1p1-10.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/openssh-3.1p1-10.i386.rpm


• Red Hat openssh-3.1p1-14.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/openssh-3.1p1-14.i386.rpm

RedHat openssh-clients-3.4p1-2.i386.rpm

• Red Hat openssh-clients-3.4p1-5.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/openssh-clients-3.4p1-5.i386.r pm


• Red Hat openssh-clients-3.4p1-7.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/openssh-clients-3.4p1-7.i386.r pm

RedHat openssh-clients-2.9p2-7.ia64.rpm

• Red Hat openssh-clients-3.1p1-10.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/openssh-clients-3.1p1-10.ia64. rpm


• Red Hat openssh-clients-3.1p1-14.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/openssh-clients-3.1p1-14.ia64. rpm

RedHat openssh-2.9p2-7.ia64.rpm

• Red Hat openssh-3.1p1-10.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/openssh-3.1p1-10.ia64.rpm


• Red Hat openssh-3.1p1-14.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/openssh-3.1p1-14.ia64.rpm

RedHat openssh-server-3.4p1-2.i386.rpm

• Red Hat openssh-server-3.4p1-5.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/openssh-server-3.4p1-5.i386.rp m


• Red Hat openssh-server-3.4p1-7.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/openssh-server-3.4p1-7.i386.rp m

RedHat openssh-3.1p1-3.i386.rpm

• Red Hat openssh-3.1p1-10.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/openssh-3.1p1-10.i386.rpm


• Red Hat openssh-3.1p1-14.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/openssh-3.1p1-14.i386.rpm

RedHat openssh-askpass-gnome-2.5.2p2-5.i386.rpm

• Red Hat openssh-askpass-gnome-3.1p1-13.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/openssh-askpass-gnome-3.1p1-13 .i386.rpm


• Red Hat openssh-askpass-gnome-3.1p1-9.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/openssh-askpass-gnome-3.1p1-9. i386.rpm

RedHat openssh-clients-3.5p1-6.i386.rpm

• Red Hat openssh-clients-3.5p1-11.i386.rpm
  ftp://updates.redhat.com/9/en/os/i386/openssh-clients-3.5p1-11.i386.rp m


• Red Hat openssh-clients-3.5p1-9.i386.rpm
  ftp://updates.redhat.com/9/en/os/i386/openssh-clients-3.5p1-9.i386.rpm

RedHat openssh-3.5p1-6.i386.rpm

• Red Hat openssh-3.5p1-11.i386.rpm
  ftp://updates.redhat.com/9/en/os/i386/openssh-3.5p1-11.i386.rpm


• Red Hat openssh-3.5p1-9.i386.rpm
  ftp://updates.redhat.com/9/en/os/i386/openssh-3.5p1-9.i386.rpm

OpenSSH OpenSSH 2.9.9

• OpenSSH openssh-3.7.1.tgz
  ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.7.1.tgz


• S.u.S.E. openssh-2.9.9p2-108.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.3/sec1/openssh-2.9.9p2-108.pp c.rpm


• S.u.S.E. openssh-2.9.9p2-155.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.2/sec1/openssh-2.9.9p2-155.i 386.rpm


• S.u.S.E. openssh-2.9.9p2-155.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.3/sec1/openssh-2.9.9p2-155.i 386.rpm


• S.u.S.E. openssh-2.9.9p2-52.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.3/sec1/openssh-2.9.9p2-52.s parc.rpm

OpenSSH OpenSSH 3.0 p1

• OpenSSH openssh-3.7.1.tgz
  ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.7.1.tgz

OpenSSH OpenSSH 3.0.1 p1

• OpenSSH openssh-3.7.1.tgz
  ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.7.1.tgz


• Trustix openssh-clients-3.1.0p1-6tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/openssh-clients-3.1 .0p1-6tr.i586.rpm


• Trustix openssh-server-3.1.0p1-6tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/openssh-server-3.1. 0p1-6tr.i586.rpm

OpenSSH OpenSSH 3.1

• OpenSSH openssh-3.7.1.tgz
  ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.7.1.tgz

OpenSSH OpenSSH 3.2.3 p1

• OpenSSH openssh-3.7.1.tgz
  ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.7.1.tgz

OpenSSH OpenSSH 3.6.1 p2

• FreeBSD Diff for /src/crypto/openssh/buffer.c between version 1.1.1.6 and 1.1.1.7
  http://www.freebsd.org/cgi/cvsweb.cgi/src/crypto/openssh/buffer.c.diff ?r1=1.1.1.6&r2=1.1.1.7&f=h


• OpenSSH openssh-3.7.1.tgz
  ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.7.1.tgz


• Trustix openssh-clients-3.6.1p2-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/2.0/RPMS/openssh-clients-3.6 .1p2-4tr.i586.rpm


• Trustix openssh-server-3.6.1p2-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/2.0/RPMS/openssh-server-3.6. 1p2-4tr.i586.rpm


• Trustix openssh-server-config-3.6.1p2-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/2.0/RPMS/openssh-server-conf ig-3.6.1p2-4tr.i586.rpm

OpenSSH OpenSSH 3.7

• OpenSSH openssh-3.7.1.tgz
  ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.7.1.tgz


• TurboLinux openssh-3.7.1p1-4.i386.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/AdvancedServ er/6/ja/updates/RPMS/openssh-3.7.1p1-4.i386.rpm


• TurboLinux openssh-askpass-3.7.1p1-4.i386.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/AdvancedServ er/6/ja/updates/RPMS/openssh-askpass-3.7.1p1-4.i386.rpm


• TurboLinux openssh-askpass-gnome-3.7.1p1-4.i386.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/AdvancedServ er/6/ja/updates/RPMS/openssh-askpass-gnome-3.7.1p1-4.i386.rpm


• TurboLinux openssh-clients-3.7.1p1-4.i386.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/AdvancedServ er/6/ja/updates/RPMS/openssh-clients-3.7.1p1-4.i386.rpm


• TurboLinux openssh-server-3.7.1p1-4.i386.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/AdvancedServ er/6/ja/updates/RPMS/openssh-server-3.7.1p1-4.i386.rpm

SGI IRIX 6.5.20 f

• SGI patch5405.tar
  ftp://patches.sgi.com/support/free/security/patches/6.5.20/patch5405.t ar

SGI IRIX 6.5.20 m

• SGI patch5405.tar
  ftp://patches.sgi.com/support/free/security/patches/6.5.20/patch5405.t ar

SGI IRIX 6.5.21 m

• SGI patch5363.tar
  ftp://patches.sgi.com/support/free/security/patches/6.5.21/patch5363.t ar

OpenSSH Buffer Mismanagement Vulnerabilities

References:

• [slackware-security] OpenSSH updated again (SSA:2003-260-01) (Slackware)
  
• Blue Coat OpenSSH Vulnerability Security Advisory (Blue Coat Systems)
  
• CA-2003-24 (CERT)
  
• Changes made between Owl 1.0 and Owl-current. (Openwall)
  
• Cisco Security Advisory:OpenSSH Server Vulnerabilities cisco-sa-20030917-openssh (Cisco)
  
• CLSA-2003:739 openssh (Conectiva)
  
• Diff for /src/crypto/openssh/buffer.c between version 1.1.1.6 and 1.1.1.7 (FreeBSD)
  
• F-Secure SSH Versions shipped prior 1998 are vulnerable to "OpenSSH buffer mana (F-Secure)
  
• NetWare 6.5 OS SP1.1 Overlay CD - TID2968534 (Novell)
  
• Network Appliance Support Services (Network Appliance)
  
• OpenSSH buffer management vulnerability (Stonesoft)
  
• OpenSSH Denial of Service Advisory (Foundry Networks)
  
• OpenSSH Security Advisory: buffer.adv (OpenSSH)
  
• Potential Remote Code Execution via SSH Service (NetScreen)
  
• Security Updates to Novell's OpenSSH - TID2967067 (Novell)
  
• Sun Alert ID: 56861 (Sun Microsystems)
  
• Sun Alert ID: 56862 (Sun Microsystems)
  
• Sun Cobalt RaQ550 Patches (Sun)
  
• Sun Linux Support - Sun Linux Patches (Sun)
  
• YDU-20030917-1 openssh (Yellow Dog)
  
• OPENSSH-SORCERER2003-09-17 (Michael Walton )