PT-2005-1096 · Dropbear · Dropbear
Matt Johnston
·
Publicado
2005-12-12
·
Atualizado
2018-10-30
·
CVE-2005-4178
CVSS v2.0
6.5
Média
| Vetor | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Dropbear versions prior to 0.47
Description
The issue is related to a buffer overflow in the Dropbear server, allowing authenticated users to execute arbitrary code via unspecified inputs due to an incorrect expression that does not enforce the proper order of operations. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be carried out remotely by an attacker who has passed the authentication procedure.
Recommendations
For versions prior to 0.47, update to version 0.47 or later to resolve the issue. As a temporary workaround, consider restricting access to the Dropbear server to minimize the risk of exploitation.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Dropbear