NVD

Id
42973  
Name
CVE-2012-0920  
Description
Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to "channels concurrency."  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-06-05  
Modified Date
2012-06-20  
Seq
2012-0920  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
216351 42973 CVE-2012-0920 http://matt.ucc.asn.au/dropbear/CHANGES  View
216352 42973 CVE-2012-0920 DSA-2456  View
216353 42973 CVE-2012-0920 52159  View
216354 42973 CVE-2012-0920 dropbear-code-execution(73444)  View
216355 42973 CVE-2012-0920 https://secure.ucc.asn.au/hg/dropbear/rev/818108bf7749  View
216356 42973 CVE-2012-0920 https://www.mantor.org/~northox/misc/CVE-2012-0920.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26915 JVNDB-2012-002622 Dropbear SSH server における任意のコードを実行される脆弱性 Dropbear SSH server には、コマンド制限と公開鍵認証が有効な場合、任意のコードを実行される、およびコマンド制限が回避される脆弱性が存在します。 CVE-2012-0920 54158 CVE-2012-0920 42973 7.1 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002622.html 2012-06-05 2012-06-07 View