CVE-2007-1099

Fixed in a distro release EPSS 2%

dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle attacks.

Published 2007-02-26 · CVE record · OSV

Products: dropbear_ssh_project dropbear_ssh

Distro releases