CVE-2004-2486
The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which might allow remote attackers to gain access.
| Software | From | Fixed in |
|---|---|---|
| dropbear_ssh_project / dropbear_ssh | - | 0.43 |
- http://matt.ucc.asn.au/dropbear/CHANGES
- http://secunia.com/advisories/12153
- http://secunia.com/advisories/28935
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml
- http://www.osvdb.org/8137
- http://www.securityfocus.com/bid/10803
- http://www.vupen.com/english/advisories/2008/0543
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16810
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40490
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime