CVE search · CVE-2005-4178
CVE-2005-4178
medium 6.5
Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.
Details
- Status
- Modified
- Published
- Last changed
- Source
- security@debian.org
- Weakness
- NVD-CWE-Other
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 2.0 | medium 6.5 | AV:N/AC:L/Au:S/C:P/I:P/A:P |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- dropbear_ssh_project · dropbear_ssh
- debian · debian_linux
References
- http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2005q4/000312.htmlPatchVendor Advisory
- http://matt.ucc.asn.au/dropbear/dropbear.htmlPatchVendor Advisory
- http://secunia.com/advisories/18108Third Party Advisory
- http://secunia.com/advisories/18109Third Party Advisory
- http://secunia.com/advisories/18142Third Party Advisory
- http://www.debian.org/security/2005/dsa-923Third Party Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200512-13.xmlThird Party Advisory
- http://www.securityfocus.com/bid/15923/Third Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2005/2962Third Party Advisory
- http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2005q4/000312.htmlPatchVendor Advisory
- http://matt.ucc.asn.au/dropbear/dropbear.htmlPatchVendor Advisory
- http://secunia.com/advisories/18108Third Party Advisory
- http://secunia.com/advisories/18109Third Party Advisory
- http://secunia.com/advisories/18142Third Party Advisory
- http://www.debian.org/security/2005/dsa-923Third Party Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200512-13.xmlThird Party Advisory
- http://www.securityfocus.com/bid/15923/Third Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2005/2962Third Party Advisory