1015742

20060307 Dropbear SSH server Denial of Service

17024

dropbear-connection-dos(25075)

The remote host is running Dropbear, a small, open-source SSH server.  The version of Dropbear installed on the remote host is prior to 0.48.0, and by default, has a limit of 30 connections in the authorization-pending state; subsequent connections are closed immediately. An unauthenticated attacker can saturate the service with multiple connections pending authorization, thereby denying service to legitimate users.

The remote host is running Dropbear, a small, open source SSH server.

The version of Dropbear installed on the remote host, by default, has a limit of 30 connections in the authorization-pending state; subsequent connections are closed immediately. This issue can be exploited trivially by an unauthenticated attacker to deny service to legitimate users.

ID	Name	Product	Family	Severity
3466	Dropbear SSH Server < 0.48.0 DoS	Nessus Network Monitor	SSH	medium
3466	Dropbear SSH Server < 0.48.0 DoS	Nessus Network Monitor	SSH	medium
21023	Dropbear SSH Authorization-pending Connection Saturation DoS	Nessus	Denial of Service	medium

CVE-2006-1206

medium

Tenable Plugins

medium

medium

medium