SideDoor - Debian/Ubuntu Backdoor Using A Reverse SSH Tunnel

sidedoor maintains a reverse tunnel to provide a backdoor. sidedoor can be used to remotely control a device behind a NAT. sidedoor is packaged for Debian-based systems with systemd or upstart. It has been used on Debian 8 jessie and Ubuntu 14.04 LTS trusty. The sidedoor user has full root access...

[SECURITY] [DLA 387-1] openssh security update

Package : openssh Version : 5.5p1-6+squeeze8 CVE ID : CVE-2016-0777 CVE-2016-0778 Debian Bug : 810984 The Qualys Security team discovered two vulnerabilities in the roaming code of the OpenSSH client an implementation of the SSH protocol suite. SSH roaming enables a client, in case an SSH...

USN-2869-1 openssh vulnerabilities

It was discovered that the OpenSSH client experimental support for resuming connections contained multiple security issues. A malicious server could use this issue to leak client memory to the server, including private client user keys...

Private Shell SSH Client 3.3 - Crash PoC

Exploit for windows platform in category dos / poc ''' Exploit title: privateshell SSH Client v.3.3 denial of service vulnerability Date: 27-5-2015 Vendor homepage: www.privateshell.com Software Link: http://www.privateshell.com/files/pshell.exe Version: 3.3 Author: 3unnym00n Details: -------- wh...

Private Shell SSH Client 3.3 - Crash (PoC)

Private Shell SSH Client 3.3 - Crash PoC ''' Exploit title: privateshell SSH Client v.3.3 denial of service vulnerability Date: 27-5-2015 Vendor homepage: www.privateshell.com Software Link: http://www.privateshell.com/files/pshell.exe Version: 3.3 Author: 3unnym00n Details: -------- when doing t...

Private Shell SSH Client 3.3 - Crash (PoC)

''' Exploit title: privateshell SSH Client v.3.3 denial of service vulnerability Date: 27-5-2015 Vendor homepage: www.privateshell.com Software Link: http://www.privateshell.com/files/pshell.exe Version: 3.3 Author: 3unnym00n Details: -------- when doing the ssh version exchange, if the server se...

SmarTTY - Multi-tabbed SSH Client with SCP Support

SmarTTY is a free multi-tabbed SSH client that supports copying files and directories with SCP on-the-fly and editing files in-place. One SSH session - multiple tabs Most SSH servers support up to 10 sub-sessions per connection. SmarTTY makes the best of it: no annoying multiple windows, no need ...

ZOC SSH Client - Buffer Overflow (SEH) (PoC)

ZOC SSH Client - Buffer Overflow SEH PoC """ Exploit title: ZOC SSH Client v.7.03.0 Buffer overflow vulnerability SEH Date: 20-5-2015 Vendor homepage: www.emtec.com Software Link: http://www.emtec.com/cgi-local/download.cgi?what=ZOC7%20Windows&link=zoc/zoc7030.exe&ext=html Author: Dolev Farhi...

ZOC SSH Client 7.03.0 Buffer Overflow

Exploit title: ZOC SSH Client v.7.03.0 Buffer overflow vulnerability SEH Date: 20-5-2015 Vendor homepage: www.emtec.com Software Link: http://www.emtec.com/cgi-local/download.cgi?what=ZOC7%20Windows&link=zoc/zoc7030.exe&ext=html Author: Dolev Farhi Details: -------- Create a new connection, run t...

ZOC SSH Client Buffer Overflow Vulnerability (SEH)

Exploit for windows platform in category dos / poc """ Exploit title: ZOC SSH Client v.7.03.0 Buffer overflow vulnerability SEH Date: 20-5-2015 Vendor homepage: www.emtec.com Software Link: http://www.emtec.com/cgi-local/download.cgi?what=ZOC7%20Windows&link=zoc/zoc7030.exe&ext=html Author: Dolev...

ZOC SSH Client - Buffer Overflow (SEH) (PoC)

""" Exploit title: ZOC SSH Client v.7.03.0 Buffer overflow vulnerability SEH Date: 20-5-2015 Vendor homepage: www.emtec.com Software Link: http://www.emtec.com/cgi-local/download.cgi?what=ZOC7%20Windows&link=zoc/zoc7030.exe&ext=html Author: Dolev Farhi Details: -------- Create a new connection, r...

Mandriva Linux Security Advisory : openssh (MDVSA-2015:095)

Updated openssh packages fix security vulnerabilities : sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshdconfig, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character CVE-2014-2532...

[SECURITY] [DSA 3190-1] putty security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3190-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 15, 2015 http://www.debian.org/security/faq -...

Debian DSA-3190-1 : putty - security update

Patrick Coleman discovered that the Putty SSH client failed to wipe out unused sensitive memory. In addition Florent Daigniere discovered that exponential values in Diffie Hellman exchanges were insufficienty restricted. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

libssh2 DoS

Uninitialized memory access in SSH client code...

Debian Security Advisory DSA 3190-1 (putty - security update)

Patrick Coleman discovered that the Putty SSH client failed to wipe out unused sensitive memory. In addition Florent Daigniere discovered that exponential values in Diffie Hellman exchanges were insufficienty restricted. OpenVAS Vulnerability Test $Id: deb3190.nasl 6609 2017-07-07 12:05:59Z...

DSA-3190-1 putty - security update

Bulletin has no description...

[SECURITY] Fedora 20 Update: putty-0.64-1.fc20

Putty is a SSH, Telnet & Rlogin client - this time for Linux...

Debian: Security Advisory (DSA-3190-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dropbear SSH <= 0.34 Remote Root Exploit

No description provided by source. / Linux x86 Dropbear SSH = 0.34 remote root exploit coded by live You'll need a hacked ssh client to try this out. I included a patch to openssh-3.6.p1 somewhere below this comment. The point is: the buffer being exploited is too small25 bytes to hold our...