Unscored severity · published Dec 31, 2003
CVE-2003-1120
Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is enabled, allows local users to obtain the server's private key
–
CVSS
0.3%
EPSS
No
On KEV
Description
Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is enabled, allows local users to obtain the server's private key.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TS
Tectia Server · Ssh
4.0.3; 4.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-1120
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-1120
secunia.com
http://secunia.com/advisories/11193
securitytracker.com
http://securitytracker.com/alerts/2004/Mar/1009532.html
Patch
http://www.kb.cert.org/vuls/id/814198
www.osvdb.org
http://www.osvdb.org/displayvuln.php?osvdb_id=4491
Patch
http://www.securityfocus.com/bid/9956
Patch
http://www.ssh.com/company/newsroom/article/520/
More from Tectia Server
8.8
CVE-2021-27891
SSH Tectia Client and Server before 6.4.19 on Windows have weak key generation
7.8
CVE-2021-27892
SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation
7.2
CVE-2025-32942
SSH Tectia Server before 6.6.6 sometimes allows attackers to read and alter a user's session traffic
7.0
CVE-2021-27893
SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in nonstandard conditions
3.7
CVE-2008-5161
Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and…