You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
4e8c6f3407
- Security: Message printout was vulnerable to format string injection. If specific usernames including "%" symbols can be created on a system (validated by getpwnam()) then an attacker could run arbitrary code as root when connecting to Dropbear server. A dbclient user who can control username or host arguments could potentially run arbitrary code as the dbclient user. This could be a problem if scripts or webpages pass untrusted input to the dbclient program. - Security: dropbearconvert import of OpenSSH keys could run arbitrary code as the local dropbearconvert user when parsing malicious key files - Security: dbclient could run arbitrary code as the local dbclient user if particular -m or -c arguments are provided. This could be an issue where dbclient is used in scripts. - Security: dbclient or dropbear server could expose process memory to the running user if compiled with DEBUG_TRACE and running with -v The security issues were reported by an anonymous researcher working with Beyond Security's SecuriTeam Secure Disclosure www.beyondsecurity.com/ssd.html Signed-off-by: Jo-Philipp Wich <jo@mein.io> |
8 years ago | |
|---|---|---|
| .. | ||
| authsae | 8 years ago | |
| dnsmasq | 8 years ago | |
| dropbear | 8 years ago | |
| ead | 8 years ago | |
| hostapd | 8 years ago | |
| igmpproxy | 8 years ago | |
| ipset-dns | 8 years ago | |
| lldpd | 8 years ago | |
| mdns | 8 years ago | |
| odhcpd | 8 years ago | |
| omcproxy | 9 years ago | |
| openvpn | 8 years ago | |
| openvpn-easy-rsa | 9 years ago | |
| ppp | 8 years ago | |
| relayd | 8 years ago | |
| samba36 | 8 years ago | |
| uhttpd | 8 years ago | |