CVEvulnerability
CVE-2007-1099
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-02-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle attacks.
Affected configurations
• dropbear ssh project dropbear ssh (< 0.49)
Related
Referenced by CWE · observed example (1)
- CWE-357 Insufficient UI Warning of Dangerous Operations weakness
References
- http://matt.ucc.asn.au/dropbear/CHANGES Vendor Advisory
- http://osvdb.org/33814 Broken Link
- http://secunia.com/advisories/24345 Third Party Advisory
- http://www.osvdb.org/32088 Broken Link
- http://www.securityfocus.com/bid/22761 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2007/0785 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32762 Third Party Advisory, VDB Entry
- http://matt.ucc.asn.au/dropbear/CHANGES Vendor Advisory
- http://osvdb.org/33814 Broken Link
- http://secunia.com/advisories/24345 Third Party Advisory
- http://www.osvdb.org/32088 Broken Link
- http://www.securityfocus.com/bid/22761 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2007/0785 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32762 Third Party Advisory, VDB Entry