Dropbear SSH 'dbclient' man-in-the-middle Vulnerability

  1. Network Vulnerabilities
  2. General
  3. Dropbear SSH 'dbclient' man-in-the-middle Vulnerability
Summary
This host is installed with Dropbear SSH client and is prone to a man-in-the-middle vulnerability.
Impact
This flaw might allow remote attackers to conduct man-in-the-middle attacks.
Solution
Updates are available.
Insight
dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch.
Affected
Versions prior to Dropbear SSH 0.49 are vulnerable.
Detection
Check the version.
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities