Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.
http://www.vupen.com/english/advisories/2005/2962
http://www.securityfocus.com/bid/15923/
http://www.gentoo.org/security/en/glsa/glsa-200512-13.xml
http://www.debian.org/security/2005/dsa-923
http://secunia.com/advisories/18142
http://secunia.com/advisories/18109
http://secunia.com/advisories/18108
http://matt.ucc.asn.au/dropbear/dropbear.html
http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2005q4/000312.html