CVE-2004-2486: dropbear ssh project dropbear ssh – CVSS 7.5 · Watchpost

← All vulnerabilities

CVE-2004-2486

高危 7.5CVE-2004-2486 · Published 31/12/2004 · updated 16/06/2026

要点

CVE-2004-2486 是影响 dropbear ssh (dropbear ssh project) 的高危 (CVSS 7.5)漏洞。
未来 30 天内被利用的概率（EPSS）：3.0%，高于 87.5% 的漏洞。
修复：升级到 0.43 或更高版本。

Package	Affected versions	Patched versions
dropbear ssh dropbear_ssh_project	`< 0.43`	`0.43`

Description

The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which might allow remote attackers to gain access.

References

matt.ucc.asn.au/dropbear/CHANGES · Vendor Advisory
secunia.com/advisories/12153 · Third Party Advisory
secunia.com/advisories/28935 · Third Party Advisory
cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml · Third Party Advisory
osvdb.org/8137 · Broken Link
securityfocus.com/bid/10803 · Third Party Advisory
vupen.com/english/advisories/2008/0543 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/16810 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/40490 · Third Party Advisory

dropbear ssh 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free