Test ID:	1.3.6.1.4.1.25623.1.0.105117
Category:	General
Title:	Dropbear SSH < 0.47 Buffer Overflow Vulnerability
Summary:	Dropbear SSH is prone to a buffer overflow vulnerability.
Description:	Summary: Dropbear SSH is prone to a buffer overflow vulnerability. Vulnerability Insight: Versions prior 0.47 does not enforce the proper order of operations due to an incorrect expression. Vulnerability Impact: The flaws allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated. Affected Software/OS: Versions prior to Dropbear SSH 0.47 are vulnerable. Solution: Updates are available. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-4178 BugTraq ID: 15923 http://www.securityfocus.com/bid/15923/ Debian Security Information: DSA-923 (Google Search) http://www.debian.org/security/2005/dsa-923 http://www.gentoo.org/security/en/glsa/glsa-200512-13.xml http://matt.ucc.asn.au/dropbear/dropbear.html http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2005q4/000312.html http://secunia.com/advisories/18108 http://secunia.com/advisories/18109 http://secunia.com/advisories/18142 http://www.vupen.com/english/advisories/2005/2962
Copyright	Copyright (C) 2014 SCHUTZWERK GmbH

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.