dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle attacks.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Dropbear_ssh |
Dropbear_ssh_project |
* |
* |
References