CVE-2003-0786

CVE-2003-0786 describes a critical vulnerability in OpenSSH versions 3.7.1 and 3.7.1p1, specifically impacting SSH1 PAM challenge response authentication when privilege separation is disabled. This flaw allows remote attackers to gain privileges due to the system failing to properly check authentication attempt results. With a CVSS score of 10.0, indicating network-based attacks with low complexity and complete compromise of confidentiality, integrity, and availability, this vulnerability poses a severe risk. Despite its high severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, suggesting it is not currently a widespread threat.