CVE-2003-0386: OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMappi...

Security readout for executives and security teams

This flaw affects very old OpenSSH deployments that use SSH host restrictions as an access gate. Under specific DNS conditions, a remote user may bypass numeric IP-based restrictions. It is not listed as KEV, and the bundle provides no evidence of active exploitation. Exposure is most likely on legacy systems still running OpenSSH 3.6.1 or earlier and relying on SSH address restrictions for access control. Modern, maintained OpenSSH deployments are unlikely to be exposed, but embedded or vendor-packaged systems should be checked. Treat this as a legacy exposure cleanup item unless old OpenSSH hosts protect sensitive access paths. Prioritize any internet-facing SSH service or appliance where source restrictions are relied upon for privileged access control. Mitigation focus: Inventory systems for OpenSSH 3.6.1 or earlier.; Apply vendor OpenSSH security updates where available.; Review SSH configurations using numeric `from=` or `user@host` restrictions..

Prepared

Jun 30, 2026, 10:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.