CVE-2016-7406
CriticalSummary
CVE-2016-7406 in Dropbear SSH before version 2016.74 has a format string vulnerability that allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.
Risk Assessment
Attackers can exploit this vulnerability to execute arbitrary code remotely, potentially leading to system takeover or access to sensitive data.
Recommendation
It is recommended to update Dropbear SSH to the latest version to mitigate this vulnerability and to monitor systems for unauthorized access attempts.
Other vulnerabilities in Dropbear SSH
See all- CVE-2016-7408High
Dbclient in Dropbear SSH before version 2016.74 allows remote attackers to execute arbitrary code via a crafted (1) -m or (2) -c argument.
- CVE-2016-7407Critical
The dropbearconvert command in Dropbear SSH before version 2016.74 allows attackers to execute arbitrary code via a crafted OpenSSH key file.
Original NVD description (English source)
Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.