Design/Logic Flaw

🗓️ 21 Aug 2018 01:29:00Reported by PRIOn knowledge baseType

recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to user enumeration vulnerability due to username validity affecting SSH_MSG_USERAUTH message fields handlin

Reporter	Title	Published	Views	Family All 346
Gitee	CVE-2018-15473-Exploit	26 Oct 202610:13	–	gitee
Gitee	Exploit for Race Condition in Openbsd Openssh	17 Aug 202115:35	–	gitee
Gitee	Exploit for Race Condition in Openbsd Openssh	8 May 202014:57	–	gitee
Gitee	Exploit for Race Condition in Openbsd Openssh	11 Jul 202021:31	–	gitee
IBM Security Bulletins	Security Bulletin: IBM Security Identity Manager Virtual Appliance is affected by multiple vulnerabilities (CVE-2019-4674, CVE-2018-15473, CVE-2019-4675)	3 Feb 202018:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System	6 May 202011:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerabilities in OpenSSH	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been addressed in IBM Security Access Manager Appliance	30 Sep 201921:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by an OpenSSH vulnerability (CVE-2018-15473)	27 Jan 202010:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in OpenSSH	7 Dec 202322:45	–	ibm

Source	Link
old	www.old.reddit.com/r/blackhat/comments/97ywnm/openssh_username_enumeration/e4e05n2/
lists	www.lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2018q3/002109.html
lists	www.lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2018q3/002108.html
lists	www.lists.debian.org/debian-lts-announce/2018/08/msg00026.html
matt	www.matt.ucc.asn.au/dropbear/CHANGES

30 Dec 2020 20:15Current

5.4Medium risk

Vulners AI Score5.4

EPSS0.98675