Summary
The remote host is missing an update to ssh
announced via advisory DSA 382-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20382-1
Insight
A bug has been found in OpenSSH's buffer handling where a buffer could be marked as grown when the actual reallocation failed.
This bug has been fixed in upstream version 3.7. For the Debian stable distribution this bug has eeb fixed in version 1:3.4p1-1.1 .
Please note that if a machine is setup to install packages from proposed-updates it will not automatically install this update.
Severity
Classification
-
CVE CVE-2003-0693 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities