Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 6.5 | MEDIUM | AV:N/AC:L/Au:S/C:P/I:P/A:P |
| CWE ID | Type | Source |
|---|---|---|
| NVD-CWE-Other | Primary | nvd@nist.gov |
| Hyperlink | Source | Resource |
|---|---|---|
| http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2005q4/000312.html | security@debian.org | Patch Vendor Advisory |
| http://matt.ucc.asn.au/dropbear/dropbear.html | security@debian.org | Patch Vendor Advisory |
| http://secunia.com/advisories/18108 | security@debian.org | Third Party Advisory |
| http://secunia.com/advisories/18109 | security@debian.org | Third Party Advisory |
| http://secunia.com/advisories/18142 | security@debian.org | Third Party Advisory |
| http://www.debian.org/security/2005/dsa-923 | security@debian.org | Third Party Advisory |
| http://www.gentoo.org/security/en/glsa/glsa-200512-13.xml | security@debian.org | Third Party Advisory |
| http://www.securityfocus.com/bid/15923/ | security@debian.org | Third Party Advisory VDB Entry |
| http://www.vupen.com/english/advisories/2005/2962 | security@debian.org | Third Party Advisory |
| http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2005q4/000312.html | af854a3a-2127-422b-91ae-364da2661108 | Patch Vendor Advisory |
| http://matt.ucc.asn.au/dropbear/dropbear.html | af854a3a-2127-422b-91ae-364da2661108 | Patch Vendor Advisory |
| http://secunia.com/advisories/18108 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/18109 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/18142 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.debian.org/security/2005/dsa-923 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.gentoo.org/security/en/glsa/glsa-200512-13.xml | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.securityfocus.com/bid/15923/ | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| http://www.vupen.com/english/advisories/2005/2962 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |