ssh_poc2024

cve-2024-6387-poc OpenSSH 服务器（sshd）中的信号处理器竞争条件 7etsuo 描述 针对 CVE-2024-6387 的漏洞利用程序，目标是 glibc 基于 Linux 系统上 OpenSSH 服务器（sshd）中的信号处理器竞争条件。该漏洞允许通过 SIGALRM 处理器中调用异步信号不安全函数以 root 身份远程执行代码。 漏洞利用详情 漏洞摘要 该漏洞利用程序针对 OpenSSH 的 sshd 中的 SIGALRM 处理器竞争条件： 受影响版本 ：OpenSSH 8.5p1 至 9.8p1。 漏洞利用 ：由于易受攻击的 SIGALRM...

CVE-2024-6387

CVE-2024-6387.py - PoC 重要说明！！！ 该漏洞利用程序仅适用于 32 位 OpenSSH 服务器。这是由于 PoC 使用了 32 位指针！ 此外，已知某些版本已打补丁，并非所有服务器都存在漏洞。 已测试环境：Kali Linux、ParrotSec、Ubuntu 22.04 📜 描述 OpenSSH 服务器中的远程未经身份验证的代码执行漏洞 CVE-2024-6387.py 是一个轻量级、高效的工具，旨在识别运行易受攻击版本的 OpenSSH 服务器，专门针对最近发现的 regreSSHion 漏洞（CVE-2024-6387）。该脚本支持快速扫描多个 IP...

regreSSHion

Qualys Security Advisory regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems CVE-2024-6387 ======================================================================== 目录 摘要 SSH-2.0-OpenSSH3.4p1 Debian 1:3.4p1-1.woody.3 Debian 3.0r6, 2005 年版 理论 实践 时机 SSH-2.0-OpenSSH4.2p1 Debian-7ubuntu...

cve-2024-6387-poc

cve-2024-6387-poc OpenSSHサーバー（sshd）におけるシグナルハンドラの競合状態 7etsuo 説明 CVE-2024-6387のエクスプロイト。glibcベースのLinuxシステム上でOpenSSHサーバー（sshd）のシグナルハンドラの競合状態を標的としています。この脆弱性により、SIGALRMハンドラ内で非同期シグナル安全でない関数が呼び出されることで、ルートとしてのリモートコード実行が可能になります。 エクスプロイトの詳細 脆弱性の概要 エクスプロイトは、OpenSSHのsshdにおけるSIGALRMハンドラの競合状態を標的とします： 影響を受けるバージョ...

cve-2024-6387-poc

cve-2024-6387-poc OpenSSH 服务器 sshd 中的信号处理程序竞争条件...

CVE-2024-6387

脆弱性の説明 CVE-2024-6387 エクスプロイトは、glibc ベースの Linux システム上の OpenSSH サーバー sshd におけるシグナルハンドラの競合状態を標的としています。SIGALRM ハンドラ内で async-signal-unsafe 関数が呼び出されるため、この脆弱性により root 権限でリモートコード実行が可能になります。 脆弱性の概要 本脆弱性は、OpenSSH の sshd における SIGALRM ハンドラの競合状態を標的としています。 影響を受けるバージョン：OpenSSH 8.5p1 ～ 9.8p1。 脆弱性：脆弱性のある SIGALRM...

cve-2024-6387-poc

cve-2024-6387-poc una condición de carrera en el manejador de señales del servidor sshd de OpenSSH 7etsuo Descripción Un exploit para CVE-2024-6387, que apunta a una condición de carrera en el manejador de señales del servidor sshd de OpenSSH en sistemas Linux basados en glibc. La vulnerabilidad...

cve-2024-6387-poc

cve-2024-6387-poc OpenSSH 服务器（sshd）中的信号处理器竞态条件 7etsuo 描述 针对 CVE-2024-6387 的利用程序，攻击基于 glibc 的 Linux 系统上 OpenSSH 服务器（sshd）中的信号处理器竞态条件。该漏洞由于在 SIGALRM 处理器中调用了异步信号不安全的函数，可导致以 root 身份远程执行代码。 漏洞利用详情 漏洞摘要 该利用程序针对 OpenSSH 的 sshd 中的 SIGALRM 处理器竞态条件： 受影响版本 ：OpenSSH 8.5p1 至 9.8p1。 利用方式 ：由于存在漏洞的 SIGALRM...

Exploit for Signal Handler Race Condition in Sonicwall Sma_6200_Firmware

C...

Cisco Unity Connection Remote Code Execution Vulnerability (regreSSHion) (cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Unity Connection is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Unity Connection due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds, after...

Cisco Expressway Series Remote Code Execution Vulnerability (regreSSHion) (cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Expressway Series is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Expressway Series due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds, after...

Cisco Adaptive Security Appliance (ASA) Software Remote Code Execution Vulnerability (regreSSHion) (cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Adaptive Security Appliance ASA Software due to a signal handler race condition found in sshd, where a client does not...

Cisco Emergency Responder Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Emergency Responder is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Emergency Responder due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds,...

Cisco Secure Email and Web Manager Remote Code Execution Vulnerability (regreSSHion) (cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Secure Email and Web Manager is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Secure Email and Web Manager due to a signal handler race condition found in sshd, where a client does not authenticate within...

Cisco Prime Infrastructure Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Prime Infrastructure is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Prime Infrastructure due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds,...

Cisco Unified Computing System Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Unified Computing System is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Unified Computing System due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime...

Cisco Smart Software Manager On-Prem Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Smart Software Manager On-Prem is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Smart Software Manager On-Prem due to a signal handler race condition found in sshd, where a client does not authenticate within...

Cisco IOS XE Software Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco IOS XE Software due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds, after whi...

Cisco NX-OS Software Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco NX-OS Software due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds, after which...

Cisco IOS XR Software Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco IOS XR Software is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco IOS XR Software due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds, after whi...