TANDBERG Video Communication Server multiple security vulnerabilities

Static ssh key, authentication bypass, files access...

freeSSHd 1.2.4 - Denial of Service

!/usr/bin/env python """ Exploit Title: FreeSSHD 1.2.4 Remote Buffer Overflow DoS Date: 22-03-2010 Author: Pi3rrot - tagazok At gmail D0t com ak37@freenode Software Link: http://www.freesshd.com/ Version: 1.2.4 Tested on: Windows XP SP3 fr Explications : This pof just may crash FreeSSHD 1.2.4 on...

freeSSHd 1.2.4 - Denial of Service

freeSSHd 1.2.4 - Denial of Service !/usr/bin/env python """ Exploit Title: FreeSSHD 1.2.4 Remote Buffer Overflow DoS Date: 22-03-2010 Author: Pi3rrot - tagazok At gmail D0t com ak37@freenode Software Link: http://www.freesshd.com/ Version: 1.2.4 Tested on: Windows XP SP3 fr Explications : This po...

FreeSSHD 1.2.4 Buffer Overflow Denial Of Service

!/usr/bin/env python """ Exploit Title: FreeSSHD 1.2.4 Remote Buffer Overflow DoS Date: 22-03-2010 Author: Pi3rrot - tagazok At gmail D0t com ak37@freenode Software Link: http://www.freesshd.com/ Version: 1.2.4 Tested on: Windows XP SP3 fr Explications : This pof just may crash FreeSSHD 1.2.4 on...

SLAD Netstat -natcp run

This script connects to SLAD on a remote host to run remote the Microsoft Baseline Security Analyzer. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenV...

SLAD Microsoft Baseline Security Analyzer Updates run

This script connects to SLAD on a remote host to run remote the Microsoft Baseline Security Analyzer. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenV...

SLAD Microsoft (R) Windows (R) Resource Checker run

This script connects to SLAD on a remote host to run remote the Microsoft R Windows R Resource Checker. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in...

SLAD Microsoft (R) Windows (R) Resource Checker run

This script connects to SLAD on a remote host to run remote the Microsoft R Windows R Resource Checker. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in...

SLAD fastjohn Run

This script connects to SLAD on a remote host to run remote john password scanner in fastmode. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. Copyright C...

Apache Site Hacked Through SSH Key Compromise

The main site of the Apache Software Foundation was compromised on Friday through an attack using a compromised SSH key, leading to concerns about the integrity of copies of the hugely popular Apache Web server, which is distributed through the Apache.org site. Early Friday morning EDT, a message...

SSH Protocol Versions Supported

Identification of SSH protocol versions supported by the remote SSH Server. Also reads the corresponding fingerprints from the service. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

linux/x86 append rsa key to /root/.ssh/authorized_keys2 295 bytes

Exploit for linux/x86 platform in category shellcode ================================================================= linux/x86 append rsa key to /root/.ssh/authorizedkeys2 295 bytes ================================================================= / linux/x86 shellcode to append rsa key to...

Jscape Secure FTP Applet sessions spoofing

SSH key is not checked...

Debian disaster-vulnerability warning-the black bar safety net

by axis 2008-05-16 http://www.ph4nt0m.org The Debian OpenSSL package the algorithms have problems, random number generation is actually in the process pid in the selection, lead to the generation of key can be exhaustive The following extract from the metasploit blog The Bug On May 13th, 2 0 0 8...

OpenSSL 0.9.8c-1 < 0.9.8g-9 (Debian and Derivatives) - Predictable PRNG Brute Force SSH (Ruby)

!/usr/bin/ruby Debian SSH Key Tester L4teral This tool helps to find user accounts with weak SSH keys that should be regenerated with an unaffected version of openssl. You will need the precalculated keys provided by HD Moore See http://metasploit.com/users/hdm/tools/debian-openssl/ for further...

Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit (ruby)

Exploit for multiple platform in category remote exploits ============================================================= Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit ruby ============================================================= !/usr/bin/ruby Debian SSH Key Tester L4teral This tool...

SLAD Fetch Results

This script connects to SLAD on a remote host to fetch the result from scripts started earlier. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenVAS...

Code injection

The SSH key generation process in OpenSSH in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote attackers to cause a denial of service by connecting to the server before SSH has finished creating keys, which causes the keys to be regenerated and can break trust relationships that were...

CVE-2007-0726

CVE-2007-0726 affects Apple Mac OS X OpenSSH: SSH key generation on OS X 10.3.9 and 10.4 (up to 10.4.8) can be exploited by remote attackers who connect before key generation completes, causing keys to be regenerated and potentially breaking trust relationships based on the original keys. The des...

pam_ssh空密码短语绕过认证限制漏洞

pamssh是结合SSH密钥和SSH客户端使用的PAM模块，允许使用SSH密钥为UNIX提供登录服务。 pamssh的实现上存在漏洞，远程攻击者可能利用此漏洞获取非授权访问。 如果禁用了allowblankpassphrase选项的话，pamssh的pamssh.c文件中的authviakey函数会无法正确地限制同空密码短语使用私钥。在提示输入密码短语时用户可以输入随机的非空短语绕过认证限制而使用空密码短语私钥。 pamssh 1.91 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...