Dropbear SSH < 0.48 Multiple Vulnerabilities

  1. Network Vulnerabilities
  2. General
  3. Dropbear SSH < 0.48 Multiple Vulnerabilities
Summary
This host is installed with Dropbear SSH and is prone to multiple vulnerabilities.
Impact
The flaws allows remote attackers to cause a denial of service (connection slot exhaustion) and local attackers to execute arbitrary commands.
Solution
Updates are available.
Insight
Multiple flaws are due to, - A large number of connection attempts that exceeds the MAX_UNAUTH_CLIENTS defined value of 30 is possible. - The shipped scp command of OpenSSH 4.2p1 expands filenames that contain shell metacharacters or spaces twice.
Affected
Versions prior to Dropbear SSH 0.48 are vulnerable.
Detection
Check the version.
References
Updated on 2015-03-25
Severity
Medium Severity
Classification
Related Vulnerabilities