LibSSH Scanner - Script To Identify Hosts Vulnerable To CVE-2018-10933

2018-10-1912:51:00

www.kitploit.com

243

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.3 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.142 Low

EPSS

Percentile

95.7%

JSON

This is a python based script to identify hosts vulnerable to CVE-2018-10933.

The vulnerability is present on versions of libssh 0.6+ and was remediated by a patch present in libssh 0.7.6 and 0.8.4. For more details: <https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/>

Help

CVE-2018-10933 [Scanner](&lt;https://www.kitploit.com/search/label/Scanner&gt;) - Find vulnerable libssh services by Leap Security (@LeapSecurity)

optional arguments:
  -h, --help            show this help message and exit
  -v, --version         show program's version number and exit
  -t TARGET, --target TARGET
                        An ip address or new line delimited file containing
                        IPs to banner grab for the vulnerability.
  -p PORT, --port PORT  Set port of [SSH](&lt;https://www.kitploit.com/search/label/SSH&gt;) service

Download Libssh-Scanner