CVE-2012-0920
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 6.4%
Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to "channels concurrency."
Productos afectados
n/a · n/aReferencias
http://matt.ucc.asn.au/dropbear/CHANGEShttp://secunia.com/advisories/48147http://secunia.com/advisories/48929https://exchange.xforce.ibmcloud.com/vulnerabilities/73444https://secure.ucc.asn.au/hg/dropbear/rev/818108bf7749https://www.mantor.org/~northox/misc/CVE-2012-0920.htmlhttp://www.debian.org/security/2012/dsa-2456http://www.osvdb.org/79590http://www.securityfocus.com/bid/52159