CVE-2007-1099: High severity Dropbear Ssh Project Dropbear Ssh vulnerability
Published Feb 26, 2007
·Updated
dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle attacks.
Affected Software
1 affected component
Dropbear Ssh Project Dropbear Ssh<0.49
Event History
Feb 26, 2007
CVE Published
05:28 PM
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1099?
CVE-2007-1099 is considered a high-severity vulnerability due to its potential to facilitate man-in-the-middle attacks.
2
How do I fix CVE-2007-1099?
To fix CVE-2007-1099, update your Dropbear SSH client to version 0.49 or later.
3
What vulnerability does CVE-2007-1099 address?
CVE-2007-1099 addresses a vulnerability in Dropbear SSH where insufficient warning is given for hostkey mismatches.
4
What could happen if I am affected by CVE-2007-1099?
If you are affected by CVE-2007-1099, a remote attacker could potentially conduct a man-in-the-middle attack.
5
Is Dropbear SSH version 0.49 safe from CVE-2007-1099?
Yes, Dropbear SSH version 0.49 and later are not affected by CVE-2007-1099.