CVE-2004-2486
CVE-2004-2486
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which might allow remote attackers to gain access.
EPSS 3.0% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40490
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml
- http://www.osvdb.org/8137
- http://secunia.com/advisories/12153
- http://matt.ucc.asn.au/dropbear/CHANGES
- http://www.vupen.com/english/advisories/2008/0543
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16810
- http://secunia.com/advisories/28935
- http://www.securityfocus.com/bid/10803
- https://nvd.nist.gov/vuln/detail/CVE-2004-2486