{"action":"Upgrade dropbear to 0.49-1 or later.","affected":[{"fixed":"0.49-1","introduced":"0"}],"component":"dropbear","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["0.49-1"],"id":"tcs_01M5N8RDPCBDTC7XCJX4PK4QWT","modified_at":"2026-10-21T17:47:46.994707884Z","published_at":"2007-02-26T17:28:00Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2007-1099","https://security-tracker.debian.org/tracker/CVE-2007-1099"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2007-1099","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2007-1099"}],"summary":"dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle attacks."}