CVE-2007-1099

CVSS 7.5 - HIGH

Description

dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle attacks.

Affected Products

Vendor	Product	Version
dropbear_ssh_project	dropbear_ssh	`All versions`

References

http://matt.ucc.asn.au/dropbear/CHANGES

http://osvdb.org/33814

http://secunia.com/advisories/24345

http://www.osvdb.org/32088

http://www.securityfocus.com/bid/22761

http://www.vupen.com/english/advisories/2007/0785

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

http://matt.ucc.asn.au/dropbear/CHANGES

http://osvdb.org/33814

http://secunia.com/advisories/24345

http://www.osvdb.org/32088

http://www.securityfocus.com/bid/22761

http://www.vupen.com/english/advisories/2007/0785

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

Weakness Types

NVD-CWE-Other

CVE Information

CVE ID:: CVE-2007-1099
Published:: 2007-02-26
Modified:: 2026-04-23
CVSS Score:: 7.5
Severity:: HIGH
Vector:: AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Vendors

dropbear_ssh_project

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL