CVE-2024-6387

CVE-2024-6387.py - PoC Note Importanti!!! L'exploit funziona SOLO su server OpenSSH a 32 bit. Questo perché il POC utilizza puntatori a 32 bit! È anche noto che alcune versioni sono già state corrette e non tutti i server sono vulnerabili. Testato su: Kali Linux, ParrotSec, Ubuntu 22.04 📜...

CVE-2024-6387

Descrizione della vulnerabilità Exploit della vulnerabilità CVE-2024-6387, riguardante una condizione di competizione nel gestore di segnali del server OpenSSH su sistemi Linux basati su glibc sshd. A causa della chiamata di una funzione async-signal-unsafe all'interno del gestore SIGALRM, la...

cve-2024-6387-poc

cve-2024-6387-poc eine Signal-Handler-Race-Condition im OpenSSH-Server sshd 7etsuo Beschreibung Ein Exploit für CVE-2024-6387, der eine Signal-Handler-Race-Condition im OpenSSH-Server sshd auf glibc-basierten Linux-Systemen ausnutzt. Die Schwachstelle ermöglicht Remote-Codeausführung als Root, da...

regreSSHion

Qualys-Sicherheitshinweis regreSSHion: RCE im OpenSSH-Server auf glibc-basierten Linux-Systemen CVE-2024-6387 ======================================================================== Inhalt Zusammenfassung SSH-2.0-OpenSSH3.4p1 Debian 1:3.4p1-1.woody.3 Debian 3.0r6, von 2005 Theorie Praxis Timing...

cve-2024-6387-poc

cve-2024-6387-poc una condizione di gara nel gestore di segnale nel server di OpenSSH sshd 7etsuo Descrizione Un exploit per CVE-2024-6387, che sfrutta una condizione di gara nel gestore di segnale nel server di OpenSSH sshd su sistemi Linux basati su glibc. La vulnerabilità consente l'esecuzione...

cve-2024-6387-poc

cve-2024-6387-poc una race condition nel gestore dei segnali del server OpenSSH sshd...

ssh_poc2024

cve-2024-6387-poc una condizione di gara nel gestore di segnali nel server OpenSSH sshd 7etsuo Descrizione Un exploit per CVE-2024-6387, che prende di mira una condizione di gara nel gestore di segnali nel server OpenSSH sshd su sistemi Linux basati su glibc. La vulnerabilità consente l'esecuzion...

cve-2024-6387-poc

cve-2024-6387-poc eine Signal-Handler-Race-Condition im OpenSSH-Server sshd 7etsuo Beschreibung Ein Exploit für CVE-2024-6387, der eine Signal-Handler-Race-Condition im OpenSSH-Server sshd auf glibc-basierten Linux-Systemen ausnutzt. Die Schwachstelle ermöglicht eine Remote-Code-Ausführung als...

Exploit for Signal Handler Race Condition in Sonicwall Sma_6200_Firmware

C...

Cisco Unity Connection Remote Code Execution Vulnerability (regreSSHion) (cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Unity Connection is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Unity Connection due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds, after...

Cisco Expressway Series Remote Code Execution Vulnerability (regreSSHion) (cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Expressway Series is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Expressway Series due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds, after...

Cisco Adaptive Security Appliance (ASA) Software Remote Code Execution Vulnerability (regreSSHion) (cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Adaptive Security Appliance ASA Software due to a signal handler race condition found in sshd, where a client does not...

Cisco Emergency Responder Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Emergency Responder is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Emergency Responder due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds,...

Cisco Secure Email and Web Manager Remote Code Execution Vulnerability (regreSSHion) (cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Secure Email and Web Manager is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Secure Email and Web Manager due to a signal handler race condition found in sshd, where a client does not authenticate within...

Cisco Prime Infrastructure Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Prime Infrastructure is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Prime Infrastructure due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds,...

Cisco Unified Computing System Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Unified Computing System is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Unified Computing System due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime...

Cisco Smart Software Manager On-Prem Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Smart Software Manager On-Prem is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Smart Software Manager On-Prem due to a signal handler race condition found in sshd, where a client does not authenticate within...

Cisco IOS XE Software Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco IOS XE Software due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds, after whi...

Cisco NX-OS Software Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco NX-OS Software due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds, after which...

Cisco IOS XR Software Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco IOS XR Software is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco IOS XR Software due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds, after whi...