CVE

Id
54163  
CVE No.
CVE-2012-0920  
Status
Candidate  
Description
Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to "channels concurrency."  
Phase
Assigned (20120126)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
569639 54163 CVE-2012-0920 MISC:https://www.mantor.org/~northox/misc/CVE-2012-0920.html  View
569640 54163 CVE-2012-0920 CONFIRM:http://matt.ucc.asn.au/dropbear/CHANGES  View
569641 54163 CVE-2012-0920 CONFIRM:https://secure.ucc.asn.au/hg/dropbear/rev/818108bf7749  View
569642 54163 CVE-2012-0920 DEBIAN:DSA-2456  View
569643 54163 CVE-2012-0920 URL:http://www.debian.org/security/2012/dsa-2456  View
569644 54163 CVE-2012-0920 BID:52159  View
569645 54163 CVE-2012-0920 URL:http://www.securityfocus.com/bid/52159  View
569646 54163 CVE-2012-0920 OSVDB:79590  View
569647 54163 CVE-2012-0920 URL:http://www.osvdb.org/79590  View
569648 54163 CVE-2012-0920 SECUNIA:48147  View
569649 54163 CVE-2012-0920 URL:http://secunia.com/advisories/48147  View
569650 54163 CVE-2012-0920 SECUNIA:48929  View
569651 54163 CVE-2012-0920 URL:http://secunia.com/advisories/48929  View
569652 54163 CVE-2012-0920 XF:dropbear-code-execution(73444)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25672 JVNDB-2012-001379 RealNetworks RealPlayer および RealPlayer SP の RV40 コーデックにおける任意のコードを実行される脆弱性 RealNetworks RealPlayer および RealPlayer SP の RV40 コーデックには、任意のコードを実行される脆弱性が存在します。 CVE-2012-0925 54163 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001379.html  View