Description
Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.
Affected products
- Debian / debian_linux3.0 – 3.0
- Debian / debian_linux3.1 – 3.1
- Dropbear SSH Project / Dropbear SSH0.47
References
- VENDOR_ADVISORYhttp://secunia.com/advisories/18142
- MISChttp://www.securityfocus.com/bid/15923/
- MAILING_LISThttp://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2005q4/000312.html
- VENDOR_ADVISORYhttp://secunia.com/advisories/18109
- MISChttp://www.gentoo.org/security/en/glsa/glsa-200512-13.xml
- VENDOR_ADVISORYhttp://www.debian.org/security/2005/dsa-923
- VENDOR_ADVISORYhttp://secunia.com/advisories/18108
- MISChttp://matt.ucc.asn.au/dropbear/dropbear.html
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2005/2962
Updated 10m ago · 8 sources