Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.

According to its banner, the remote host is runnning a version of Dropbear SSH before 0.47.  Such versions contain a buffer allocation error that may allow an authenticated user to gain elevated privileges.

A buffer overflow has been discovered in dropbear, a lightweight SSH2 server and client, that may allow authenticated users to execute arbitrary code as the server user (usually root).

The remote host is affected by the vulnerability described in GLSA-200512-13 (Dropbear: Privilege escalation)

    Under certain conditions Dropbear could fail to allocate a     sufficient amount of memory, possibly resulting in a buffer overflow.
  Impact :

    By sending specially crafted data to the server, authenticated     users could exploit this vulnerability to execute arbitrary code with     the permissions of the SSH server user, which is the root user by     default.
  Workaround :

    There is no known workaround at this time.

The remote host is running a version of the Dropbear SSH server prior to 0.47.0 that is vulnerable to a remote buffer overflow.  An attacker exploiting this flaw would need to be able to log into a valid account.  After logging in, the user would send a malformed request to the SSH server which would result in a buffer overflow and execution of arbitrary code.

ID	Name	Product	Family	Type	Severity
34769	Dropbear SSH Server svr_ses.childpidsize Remote Overflow	Nessus	Misc.	Remote	high
22789	Debian DSA-923-1 : dropbear - buffer overflow	Nessus	Debian Local Security Checks	Local	medium
20354	GLSA-200512-13 : Dropbear: Privilege escalation	Nessus	Gentoo Local Security Checks	Local	medium
3331	Dropbear SSH Server < 0.47.0 svr_ses.childpidsize Remote Overflow	Nessus Network Monitor	SSH		medium

Detections

Analytics

CVE-2005-4178

high

Tenable Plugins

high

medium

medium

medium