All Projects → jas502n → CVE-2018-10933

jas502n / CVE-2018-10933

Licence: other
libssh CVE-2018-10933

Programming Languages

python
139335 projects - #7 most used programming language

CVE-2018-10933

libssh 服务端权限认证绕过漏洞(CVE-2018-10933)

libssh是一个提供ssh相关接口的开源库,包含服务端、客户端等。其服务端代码中存在一处逻辑错误,攻击者可以在认证成功前发送MSG_USERAUTH_SUCCESS消息,绕过认证过程,未授权访问目标SSH服务器。


0x00 docker for libssh vuln

https://github.com/vulhub/vulhub/blob/master/libssh/CVE-2018-10933/README.md

0x01 nmap scan libssh version

0x02 payload user

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].