Description (CNA)
Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://security.gentoo.org/glsa/201702-23
- http://www.securityfocus.com/bid/92974
- http://www.openwall.com/lists/oss-security/2016/09/15/2
- https://bugzilla.redhat.com/show_bug.cgi?id=1376353
- https://secure.ucc.asn.au/hg/dropbear/rev/b66a483f3dcb
ADP enrichment
No English description supplied.