CVE-2005-4178: Buffer Overflow
Published Dec 12, 2005
·Updated
Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.
Affected Software
3 affected components
Dropbear Ssh Project Dropbear Ssh<0.47
Debian Debian Linux=3.1
Debian Debian Linux=3.0
Remediation
Patch Available
Event History
Dec 12, 2005
CVE Published
09:03 PM
Dec 13, 2005
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-4178?
CVE-2005-4178 is considered critical due to the potential for remote code execution by authenticated users.
2
How do I fix CVE-2005-4178?
To fix CVE-2005-4178, upgrade to Dropbear SSH version 0.47 or later.
3
Which software is affected by CVE-2005-4178?
CVE-2005-4178 affects Dropbear SSH versions prior to 0.47 and Debian Linux versions 3.0 and 3.1.
4
What vulnerability type is CVE-2005-4178?
CVE-2005-4178 is categorized as a buffer overflow vulnerability.
5
Can CVE-2005-4178 affect my server?
If your server is running an affected version of Dropbear SSH or Debian Linux, it is at risk from CVE-2005-4178.