VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 6, 2003· Updated Jun 16, 2026

CVE-2003-0826

CVE-2003-0826

Description

lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • GNU/Lsh3 versions
    cpe:2.3:a:gnu:lsh:1.4:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:gnu:lsh:1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:lsh:1.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:lsh:1.4.2:*:*:*:*:*:*:*
  • lsh/lshdllm-create

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.