Debian/dropbear: unknown

dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle attacks.

Action: Upgrade dropbear to 0.49-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-1099
• https://security-tracker.debian.org/tracker/CVE-2007-1099

published 2007-02-26T17:28:00Z · modified 2026-10-21T17:47:46.994707884Z · JSON