CVE-2018-10933

服务器代码中的身份验证绕过 CVE-2018-10933 Versions 0.7.6 to 0.8.4 描述 libssh 0.6及以上版本在服务器代码中存在一个身份验证绕过漏洞。通过向服务器发送SSH2MSGUSERAUTHSUCCESS消息以替代服务器期望用于启动身份验证的SSH2MSGUSERAUTHREQUEST消息，攻击者可以在没有任何凭据的情况下成功通过身份验证。 该漏洞由NCC集团的Peter Winter-Smith发现。 安装 该漏洞的POC演示以docker映像形式提供。 cd ./CVE-2018-10933/docker docker-compose up 致谢...

EUVD-2006-4912

Malware in sbrugna...

CVE-2006-4925

packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service crash by sending an invalid protocol sequence with USERAUTHSUCCESS before NEWKEYS, which causes newkeysmode to be NULL...

CVE-2006-4925

packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service crash by sending an invalid protocol sequence with USERAUTHSUCCESS before NEWKEYS, which causes newkeysmode to be NULL...

CVE-2006-4925: Undefined Security Weakness

packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service crash by sending an invalid protocol sequence with USERAUTHSUCCESS before NEWKEYS, which causes newkeysmode to be NULL...