CVE-2013-4434

概要

参考情報

• lists.opensuse.org/opensuse-updates/2013-10/msg00061.html · Third Party Advisory
• lists.opensuse.org/opensuse-updates/2013-11/msg00046.html · Third Party Advisory
• secunia.com/advisories/55173 · Vendor Advisory
• openwall.com/lists/oss-security/2013/10/16/11 · Mailing List
• securityfocus.com/bid/62993 · Third Party Advisory
• matt.ucc.asn.au/dropbear/CHANGES · Vendor Advisory
• secure.ucc.asn.au/hg/dropbear/rev/d7784616409a · Patch
• support.citrix.com/article/CTX216642 · Third Party Advisory

dropbear ssh のその他の脆弱性

• CVE-2023-48795中 5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas…
• CVE-2021-36369高 7.5An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-…
• CVE-2020-36254高 8.1scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.
• CVE-2019-12953中 5.3Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-20…
• CVE-2017-2659高 7.5It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an invalid username is …