CVE-2005-4178 Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression...
MediumCVSS 6.5
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dropbear ssh project dropbear ssh | < 0.47 | 0.47 |
| debian linux | = 3.0 | No fix listed |
| debian linux | = 3.1 | No fix listed |
| debian/dropbear(Debian:12) | < 0.47-1 | 0.47-1 |
| debian/dropbear(Debian:13) | < 0.47-1 | 0.47-1 |
| debian/dropbear(Debian:14) | < 0.47-1 | 0.47-1 |
References
- [dropbear] 20051211 Dropbear 0.47 (and security fix) mailing-list patch vendor-advisory
- matt.ucc.asn.au patch vendor-advisory
- 18108 third-party-advisory
- 18109 third-party-advisory
- 18142 third-party-advisory
- DSA-923 third-party-advisory vendor-advisory
- GLSA-200512-13 third-party-advisory vendor-advisory
- 15923 third-party-advisory vdb-entry
- ADV-2005-2962 third-party-advisory vdb-entry
- Debian Security Tracker CVE-2005-4178 vendor-advisory