Test ID:	1.3.6.1.4.1.25623.1.0.105116
Category:	General
Title:	Dropbear SSH < 0.43 DSS Verification Code Vulnerability
Summary:	Dropbear SSH is prone to a DSS verification code vulnerability.
Description:	Summary: Dropbear SSH is prone to a DSS verification code vulnerability. Vulnerability Insight: The DSS verification code in Dropbear SSH before 0.43 frees uninitialized variables. Vulnerability Impact: This flaw might allow remote attackers to gain access. Affected Software/OS: Versions prior to Dropbear SSH 0.43 are vulnerable. Solution: Updates are available. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-2486 BugTraq ID: 10803 http://www.securityfocus.com/bid/10803 Cisco Security Advisory: 20080213 Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml http://www.osvdb.org/8137 http://secunia.com/advisories/12153 http://secunia.com/advisories/28935 http://www.vupen.com/english/advisories/2008/0543 XForce ISS Database: cisco-unifiedipphone-ssh-bo(40490) https://exchange.xforce.ibmcloud.com/vulnerabilities/40490 XForce ISS Database: dropbear-dss-code-execution(16810) https://exchange.xforce.ibmcloud.com/vulnerabilities/16810
Copyright	Copyright (C) 2014 SCHUTZWERK GmbH

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.