CVE-2007-1099
dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a...
CVE-2007-1099 is a high vulnerability (CVSS 7.5) in Dropbear Ssh Project Ssh, published February 26, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.17%, the 82nd percentile. Fixed in dropbear 0.49-1.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 2.17%EPSS, 82nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.49-1dropbear +2 more
Description
dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle attacks.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle attacks.
- Record
CVE-2007-1099- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle attacks.
- Record
CVE-2007-1099- Updated
- 2026-11-02
EUVDEUVD-2007-1096No score
dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle attacks.
- Record
EUVD-2007-1096- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4qp5-f859-rjjfNo score
dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a...
dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle attacks.
- Record
GHSA-4qp5-f859-rjjf- Updated
- 2026-11-02
OSVNo score
dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle attacks.
- Record
CVE-2007-1099- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-1099No score
dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle attacks.
- Record
DEBIAN-CVE-2007-1099- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.