Skip to content
OpenAdvisories

Vendor

https://github.com/mkj/dropbear/

1 known vulnerabilities.

Products

1 result · Feed

  • Medium 5.4

    Dropbear: privilege escalation via unix domain socket forwardings

    A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root, only switching to the logged-in user upon spawning a shell or performing some o…