Test ID:	1.3.6.1.4.1.25623.1.0.105113
Category:	General
Title:	Dropbear SSH 0.52 - 2011.54 Use-after-free Vulnerability
Summary:	Dropbear SSH is prone to a use-after-free vulnerability.
Description:	Summary: Dropbear SSH is prone to a use-after-free vulnerability. Vulnerability Insight: A use-after-free vulnerability exists in Dropbear SSH 0.52 through 2011.54 when command restriction and public key authentication are enabled. Vulnerability Impact: This flaw allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to channels concurrency. Affected Software/OS: Versions of Dropbear SSH 0.52 through 2011.54 are vulnerable. Solution: Updates are available. Please see the references for more information. CVSS Score: 7.1 CVSS Vector: AV:N/AC:H/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0920 BugTraq ID: 52159 http://www.securityfocus.com/bid/52159 Debian Security Information: DSA-2456 (Google Search) http://www.debian.org/security/2012/dsa-2456 https://www.mantor.org/~northox/misc/CVE-2012-0920.html http://www.osvdb.org/79590 http://secunia.com/advisories/48147 http://secunia.com/advisories/48929 XForce ISS Database: dropbear-code-execution(73444) https://exchange.xforce.ibmcloud.com/vulnerabilities/73444
Copyright	Copyright (C) 2014 SCHUTZWERK GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.