CVE-2007-3102 Other in n/a

What is CVE-2007-3102?

CVE-2007-3102 is a medium-severity vulnerability in OpenSSH, published on 18 Oct 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Unspecified vulnerability in the linux_audit_record_event function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username. NOTE: some of these details are obtained from third party information.

Which versions are affected by CVE-2007-3102?

It affects 1 product.

Products include OpenSSH.

How do I fix CVE-2007-3102?

Upgrade to a fixed version.

Is CVE-2007-3102 being exploited?

There is no known exploitation of CVE-2007-3102 in the wild and no public exploit code.

Other vulnerabilities in OpenSSH

• CVE-2003-0786 Auth bypass in n/a Critical 10.0
• CVE-2003-0693 Memory corruption in n/a Critical 10.0
• CVE-2002-0640 Memory corruption in n/a Critical 10.0
• CVE-2001-0144 Integer overflow in n/a Critical 10.0
• CVE-2000-0999 Memory corruption in n/a Critical 10.0

All OpenSSH vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-pjxv-8cr6-cx99.