QwikSec

Security Database

CVE

CWE

Training

CVE-2003-0386

Published: Jun 10, 2003

Modified: Aug 8, 2024

PUBLISHED

Description

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_REDHAT

third-party-advisory

x_refsource_SECUNIA

third-party-advisory

x_refsource_CERT-VN

oval:org.mitre.oval:def:9894

vdb-entry

signature

x_refsource_OVAL

http://lists.apple.com/mhonarc/security-announce/msg00038.html

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

third-party-advisory

x_refsource_SECUNIA

third-party-advisory

x_refsource_SECUNIA

20030605 OpenSSH remote clent address restriction circumvention

mailing-list

x_refsource_BUGTRAQ

third-party-advisory

x_refsource_SECUNIA

http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm

x_refsource_CONFIRM

http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

vendor-advisory

x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.