GLSA-200512-13 : Dropbear: Privilege escalation

NASLDB: GLSA-200512-13 : Dropbear: Privilege escalation

General

ID: 20354
Name: GLSA-200512-13 : Dropbear: Privilege escalation

Summary: Checks for updated package(s) in /var/db/pkg

Credits: –

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P
CVSS Temporal Vector: –

Port: 0
Family: Gentoo Local Security Checks
Type: Local

Description

The remote host is affected by the vulnerability described in GLSA-200512-13
(Dropbear: Privilege escalation)

Under certain conditions Dropbear could fail to allocate a
sufficient amount of memory, possibly resulting in a buffer overflow.

Impact :

By sending specially crafted data to the server, authenticated
users could exploit this vulnerability to execute arbitrary code with
the permissions of the SSH server user, which is the root user by
default.

Workaround :

There is no known workaround at this time.

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: CVE-2005-4178
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: 2005/12/11
Patch Release: 2005/12/23
Plugin Release: 2005/12/30

Plugin

Version: 1.10
Filename: gentoo_GLSA-200512-13.nasl
Filesize: 3352 bytes
MD5 Hash: 0bdd5082a928a8edfac6a2b5fbc74cca

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/Gentoo/release", "Host/Gentoo/qpkg-list
Dependencies: "ssh_get_info.nasl"

Latest Plugins

Latest Plugins

scip AG