CVE search · CVE-2012-0920
CVE-2012-0920
high 7.1
Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to "channels concurrency."
Details
- Status
- Modified
- Published
- Last changed
- Source
- cve@mitre.org
- Weakness
- CWE-399
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 2.0 | high 7.1 | AV:N/AC:H/Au:S/C:C/I:C/A:C |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- dropbear_ssh_project · dropbear_ssh
- debian · debian_linux
References
- http://matt.ucc.asn.au/dropbear/CHANGESVendor Advisory
- http://secunia.com/advisories/48147Third Party Advisory
- http://secunia.com/advisories/48929Third Party Advisory
- http://www.debian.org/security/2012/dsa-2456Third Party Advisory
- http://www.osvdb.org/79590Broken Link
- http://www.securityfocus.com/bid/52159Third Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73444Third Party AdvisoryVDB Entry
- https://secure.ucc.asn.au/hg/dropbear/rev/818108bf7749Vendor Advisory
- https://www.mantor.org/~northox/misc/CVE-2012-0920.htmlThird Party Advisory
- http://matt.ucc.asn.au/dropbear/CHANGESVendor Advisory
- http://secunia.com/advisories/48147Third Party Advisory
- http://secunia.com/advisories/48929Third Party Advisory
- http://www.debian.org/security/2012/dsa-2456Third Party Advisory
- http://www.osvdb.org/79590Broken Link
- http://www.securityfocus.com/bid/52159Third Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73444Third Party AdvisoryVDB Entry
- https://secure.ucc.asn.au/hg/dropbear/rev/818108bf7749Vendor Advisory
- https://www.mantor.org/~northox/misc/CVE-2012-0920.htmlThird Party Advisory