Security Advisory

CVE-2003-0826

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2003-09-23 04:00:00
Last updated 2024-08-08 02:05:12
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack.