Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 14/03/2006 Updated: 30/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Matt Johnston Dropbear SSH server 0.47 and previous versions, as used in embedded Linux devices and on general-purpose operating systems, allows remote malicious users to cause a denial of service (connection slot exhaustion) via a large number of connection attempts that exceeds the MAX_UNAUTH_CLIENTS defined value of 30.

Vulnerable Product	Search on Vulmon	Subscribe to Product
dropbear ssh project dropbear ssh

#!/usr/bin/perl ## I needed a working test script so here it is ## just a keep alive thread, I had a few problems with Pablo's code running properly ## ## Straight from Pablo Fernandez's advisory: # Vulnerable code is in svr-mainc # # /* check for max number of connections not authorised */ # for (j = 0; j < MAX_UNAUTH_CLIENTS; j++) { # ...

NVD-CWE-Other http://www.securityfocus.com/bid/17024 http://securitytracker.com/id?1015742 https://exchange.xforce.ibmcloud.com/vulnerabilities/25075 http://www.securityfocus.com/archive/1/426999/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/1572/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-1206

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect