7.5

CVE-2004-2486

The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which might allow remote attackers to gain access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.03% 0.858
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://matt.ucc.asn.au/dropbear/CHANGES
Vendor Advisory
http://secunia.com/advisories/12153
Third Party Advisory
http://secunia.com/advisories/28935
Third Party Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml
Third Party Advisory
http://www.osvdb.org/8137
Broken Link
http://www.securityfocus.com/bid/10803
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/0543
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16810
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/40490
Third Party Advisory
VDB Entry