Every CVE Search/ Get API key

CVE-2003-0386

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with...

7.5 HighFix available

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address.

Exploit likelihood

5.77%Up 2.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address.

Record
CVE-2003-0386
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address.

Record
CVE-2003-0386
Updated
2026-11-02
EUVDEUVD-2003-0380 No score

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address.

Record
EUVD-2003-0380
Updated
2026-11-03
GitHub AdvisoriesGHSA-ph8j-5f3x-v435 No score

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with...

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address.

Record
GHSA-ph8j-5f3x-v435
Updated
2026-11-02
OSV No score

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address.

Record
CVE-2003-0386
Updated
2026-11-02
OSVDEBIAN-CVE-2003-0386 No score

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address.

Record
DEBIAN-CVE-2003-0386
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openssh
Debian:12
 before 1:3.8p1-1
1:3.8p1-1
openssh
Debian:13
 before 1:3.8p1-1
1:3.8p1-1
openssh
Debian:14
 before 1:3.8p1-1
1:3.8p1-1
openssh
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-askpass
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-askpass-gnome
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-clients
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-server
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
Show 37 moreShow less
Affected packages
PackageAffectedFixed
openssh-askpass
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-askpass-gnome
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-clients
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-server
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-askpass
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-askpass-gnome
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-clients
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-server
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-askpass
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-askpass-gnome
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-clients
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh-server
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:3.6.1p2-33.30.9
0:3.6.1p2-33.30.9
openssh
Red Hat:enterprise_linux:2.1::as
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh-askpass
Red Hat:enterprise_linux:2.1::as
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh-askpass-gnome
Red Hat:enterprise_linux:2.1::as
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh-clients
Red Hat:enterprise_linux:2.1::as
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh-server
Red Hat:enterprise_linux:2.1::as
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh-askpass
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh-askpass-gnome
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh-clients
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh-server
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh
Red Hat:enterprise_linux:2.1::es
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh-askpass
Red Hat:enterprise_linux:2.1::es
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh-askpass-gnome
Red Hat:enterprise_linux:2.1::es
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh-clients
Red Hat:enterprise_linux:2.1::es
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh-server
Red Hat:enterprise_linux:2.1::es
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh-askpass
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh-askpass-gnome
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh-clients
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21
openssh-server
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 4 CVEs
 before 0:3.1p1-21
0:3.1p1-21

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2003-0386 is a high vulnerability (CVSS 7.5) in Openbsd Openssh, published June 10, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.77%, the 93rd percentile. Fixed in openssh 1:3.8p1-1.

References

Show 40 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open