What’s Vulnerable › Vulnerabilities

CVE-2003-0386

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2003-07-02 · updated 2026-06-16

Description

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address.

Affected products

• OpenSSH: 3.6.1

References

• http://lists.apple.com/mhonarc/security-announce/msg00038.html
• http://secunia.com/advisories/21129
• http://secunia.com/advisories/21262
• http://secunia.com/advisories/21724
• http://secunia.com/advisories/22196
• http://secunia.com/advisories/23680
• http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm
• http://www.kb.cert.org/vuls/id/978316
• http://www.redhat.com/support/errata/RHSA-2006-0298.html
• http://www.redhat.com/support/errata/RHSA-2006-0698.html
• http://www.securityfocus.com/archive/1/324016/2003-06-03/2003-06-09/0

Get alerted when CVE-2003-0386 or the next vulnerability affects your stack