Summary
This host is installed with Dropbear SSH Server and is prone to a username remote format string buffer overflow.
Impact
By attempting to log on to a Dropbear Server with a username containing a format specifier, a remote attacker can overwrite arbitrary memory addresses and execute arbitrary code resulting in a loss of integrity.
Solution
Updates are available.
Insight
The program fails to perform proper bounds checking resulting in a format string buffer overflow.
Affected
Versions prior to Dropbear SSH Server 0.35 are vulnerable.
Detection
Check the version.
References
