PT-2012-1171 · Dropbear · Dropbear Ssh Server

Danny Fullerton · Published 2012-06-05 · Updated 2018-10-30 · CVE-2012-0920

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dropbear SSH Server versions 0.52 through 2012.54

Description The issue allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to channels concurrency. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be carried out remotely by an attacker who has passed the authentication procedure.

Recommendations For Dropbear SSH Server versions 0.52 through 2012.54, update to version 2012.55 or later to resolve the issue. As a temporary workaround, consider disabling public key authentication and command restriction until a patch is available. Restrict access to the SSH server to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2015-09710

CVE-2012-0920

DSA-2456-1

Affected Products

Dropbear Ssh Server

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2012-0920 · Security Note
• https://secure.ucc.asn.au/hg/dropbear/rev/818108bf7749 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-0920 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09710 · Security Note
• http://debian.org/security/2012/dsa-2456 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-0920 · Vendor Advisory
• http://matt.ucc.asn.au/dropbear/CHANGES · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-0920 · Vendor Advisory
• http://secunia.com/advisories/48929 · Note
• http://securityfocus.com/bid/52159 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73444 · Note
• http://security.gentoo.org/glsa/glsa-201309-20.xml · Note
• https://mantor.org/~northox/misc/CVE-2012-0920.html · Note
• http://osvdb.org/79590 · Note
• http://secunia.com/advisories/48147 · Note