Oval Definition:oval:org.mitre.oval:def:18111
Revision Date:2014-06-23Version:7
Title:DSA-2456-1 dropbear - use after free
Description:Danny Fullerton discovered a use-after-free in the Dropbear SSH daemon, resulting in potential execution of arbitrary code. Exploitation is limited to users, who have been authenticated through public key authentication and for which command restrictions are in place.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2012-0920
DSA-2456-1
Platform(s):Debian GNU/kFreeBSD 6.0
Debian GNU/Linux 6.0
Product(s):dropbear
Definition Synopsis
  • Debian 6.0 is installed
  • AND GNU/Linux or GNU/kFreeBSD kernel
  • Debian GNU/Linux is installed
  • OR Debian GNU/kFreeBSD is installed
  • AND dropbear DPKG is earlier than 0.52-5+squeeze1
  • BACK