CVE-2012-0920

Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to "channels...

Design/Logic Flaw

Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to "channels...

CVE-2012-0920

Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to "channels...

CVE-2012-0920

Dropbear SSH Server 0.52–2012.54 is affected by a use-after-free (UAF) vulnerability when command restriction and public key authentication are enabled, exploitable by remote authenticated users via crafted command requests related to channels concurrency. Impact per sources includes arbitrary co...

CVE-2012-0920

Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to "channels...

CVE-2012-0920: Undefined Security Weakness

Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to "channels...

PT-2012-1171

Name of the Vulnerable Software and Affected Versions Dropbear SSH Server versions 0.52 through 2012.54 Description The issue allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to channels concurrency. This ca...

Dropbear SSH server use-after-free

No description provided...

dropbear -- arbitrary code execution

The Dropbear project reports: Dropbear SSH Server could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a use-after- free error. If a command restriction is enforced, an attacker could exploit this vulnerability to execute arbitrary code on the system with...

OpenSSH >= 2.3.0 AllowTcpForwarding Port Bouncing

According to its banner, the remote host is running OpenSSH, version 2.3.0 or later. Such versions of OpenSSH allow forwarding TCP connections. If the OpenSSH server is configured to allow anonymous connections e.g. AnonCVS, remote, unauthenticated users could use the host as a proxy. C Tenable,...

Red Hat Enterprise Linux OpenSSH ChrootDirectory Local Privilege Escalation

According to its banner, the version of OpenSSH running on the remote host may have a privilege escalation vulnerability. OpenSSH on Red Hat Enterprise Linux 5, Fedora 11, and possibly other platforms use an insecure implementation of the 'ChrootDirectory' configuration setting, which could allow...

SSH Server Detection (realtime)

Binary data 6088.prm...

CVE-2011-3992

Buffer overflow in the SSH server functionality on the D-Link DES-3800 with firmware before 4.50B052, DWL-2100AP with firmware before 2.50RC548, and DWL-3200AP with firmware before 2.55RC549 allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors...

Buffer overflow

Buffer overflow in the SSH server functionality on the D-Link DES-3800 with firmware before 4.50B052, DWL-2100AP with firmware before 2.50RC548, and DWL-3200AP with firmware before 2.55RC549 allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors...

CVE-2011-3992

Buffer overflow in the SSH server functionality on the D-Link DES-3800 with firmware before 4.50B052, DWL-2100AP with firmware before 2.50RC548, and DWL-3200AP with firmware before 2.55RC549 allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors...

CVE-2011-3992

CVE-2011-3992 affects D-Link DES-3800, DWL-2100AP, and DWL-3200AP where the SSH server implementation contains a buffer overflow. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors. Affected firmware versions are DES-3800 < ...

CVE-2011-3992: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the SSH server functionality on the D-Link DES-3800 with firmware before 4.50B052, DWL-2100AP with firmware before 2.50RC548, and DWL-3200AP with firmware before 2.55RC549 allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors...

PT-2011-4804

Name of the Vulnerable Software and Affected Versions D-Link DES-3800 versions prior to 4.50B052 D-Link DWL-2100AP versions prior to 2.50RC548 D-Link DWL-3200AP versions prior to 2.55RC549 Description A buffer overflow issue exists in the SSH server functionality, allowing remote attackers to...

OpenSSH < 4.0 known_hosts Plaintext Host Information Disclosure

According to its banner, the remote host is running a version of OpenSSH prior to 4.0. Versions of OpenSSH earlier than 4.0 are affected by an information disclosure vulnerability because the application stores hostnames, IP addresses, and keys in plaintext in the 'knownhosts' file. A local...

Attachmate Reflection for Secure IT Windows Server Installed

Attachmate Reflection for Secure IT Windows server, a SSH server, is installed on the remote host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid55284; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...