Skip to content

CVE-2003-1120

Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin ...

3.7 Low

CVE-2003-1120 is a low vulnerability (CVSS 3.7) in Ssh Tectia Server, published December 31, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 25th percentile. No source names a fixed version.

Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is enabled, allows local users to obtain the server's private key.

Exploit likelihood

0.32%Down 0.7 points since Feb 4, 2022

What each source reports

NVD Score used 3.7

Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is enabled, allows local users to obtain the server's private key.

Record: CVE-2003-1120
CVSS 2.0: 3.7 LowAV:L/AC:H/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is enabled, allows local users to obtain the server's private key.

Record: CVE-2003-1120
Updated: 2026-11-02

EUVDEUVD-2003-1110 No score

Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is enabled, allows local users to obtain the server's private key.

Record: EUVD-2003-1110
Updated: 2026-11-03

GitHub AdvisoriesGHSA-9fjw-px98-qrx4 No score

Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin ...

Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is enabled, allows local users to obtain the server's private key.

Record: GHSA-9fjw-px98-qrx4
Updated: 2026-11-02

Affected products

ssh tectia server

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References