618 matches found
SLAD Microsoft (R) Windows (R) Resource Checker run
This script connects to SLAD on a remote host to run remote the Microsoft R Windows R Resource Checker. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in...
SLAD fastjohn Run
This script connects to SLAD on a remote host to run remote john password scanner in fastmode. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. Copyright C...
Apache Site Hacked Through SSH Key Compromise
The main site of the Apache Software Foundation was compromised on Friday through an attack using a compromised SSH key, leading to concerns about the integrity of copies of the hugely popular Apache Web server, which is distributed through the Apache.org site. Early Friday morning EDT, a message...
SSH Protocol Versions Supported
Identification of SSH protocol versions supported by the remote SSH Server. Also reads the corresponding fingerprints from the service. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...
linux/x86 append rsa key to /root/.ssh/authorized_keys2 295 bytes
Exploit for linux/x86 platform in category shellcode ================================================================= linux/x86 append rsa key to /root/.ssh/authorizedkeys2 295 bytes ================================================================= / linux/x86 shellcode to append rsa key to...
Jscape Secure FTP Applet sessions spoofing
SSH key is not checked...
Debian disaster-vulnerability warning-the black bar safety net
by axis 2008-05-16 http://www.ph4nt0m.org The Debian OpenSSL package the algorithms have problems, random number generation is actually in the process pid in the selection, lead to the generation of key can be exhaustive The following extract from the metasploit blog The Bug On May 13th, 2 0 0 8...
OpenSSL 0.9.8c-1 < 0.9.8g-9 (Debian and Derivatives) - Predictable PRNG Brute Force SSH (Ruby)
!/usr/bin/ruby Debian SSH Key Tester L4teral This tool helps to find user accounts with weak SSH keys that should be regenerated with an unaffected version of openssl. You will need the precalculated keys provided by HD Moore See http://metasploit.com/users/hdm/tools/debian-openssl/ for further...
Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit (ruby)
Exploit for multiple platform in category remote exploits ============================================================= Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit ruby ============================================================= !/usr/bin/ruby Debian SSH Key Tester L4teral This tool...
SLAD Fetch Results
This script connects to SLAD on a remote host to fetch the result from scripts started earlier. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenVAS...
Code injection
The SSH key generation process in OpenSSH in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote attackers to cause a denial of service by connecting to the server before SSH has finished creating keys, which causes the keys to be regenerated and can break trust relationships that were...
CVE-2007-0726
CVE-2007-0726 affects Apple Mac OS X OpenSSH: SSH key generation on OS X 10.3.9 and 10.4 (up to 10.4.8) can be exploited by remote attackers who connect before key generation completes, causing keys to be regenerated and potentially breaking trust relationships based on the original keys. The des...
pam_ssh空密码短语绕过认证限制漏洞
pamssh是结合SSH密钥和SSH客户端使用的PAM模块，允许使用SSH密钥为UNIX提供登录服务。 pamssh的实现上存在漏洞，远程攻击者可能利用此漏洞获取非授权访问。 如果禁用了allowblankpassphrase选项的话，pamssh的pamssh.c文件中的authviakey函数会无法正确地限制同空密码短语使用私钥。在提示输入密码短语时用户可以输入随机的非空短语绕过认证限制而使用空密码短语私钥。 pamssh 1.91 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
[security bulletin] HPSBMA02173 SSRT061230 rev. 1 - HP Integrated Lights Out (iLO & iLO 2) Running SSH Key Based Authentication Remote Unauthorized Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00800677 Version: 1 HPSBMA02173 SSRT061230 rev. 1 - HP Integrated Lights Out iLO & iLO 2 Running SSH Key Based Authentication Remote Unauthorized Access NOTICE: The information in this Security...
CVE-2005-2770
WRQ Reflection for Secure IT Windows Server 6.0 formerly known as F-Secure SSH server does not properly handle when the Windows Administrator or Guest accounts are renamed after SSH key authentication has been configured, which allows remote attackers to use the original names during login...
CVE-2005-2770
WRQ Reflection for Secure IT Windows Server 6.0 formerly known as F-Secure SSH server does not properly handle when the Windows Administrator or Guest accounts are renamed after SSH key authentication has been configured, which allows remote attackers to use the original names during login...
MRV InReach console server restrictions protection bypass
If SSH key is used for authentication ports restrictions are not applied...
4.3 Security: local DoS via clean-tmps
Tested in 4.3-RELEASE only: If /etc/periodic/daily/clean-tmps is enabled, then it's possible for any local user to trick it into calling unlink or rmdir on anything in the root directory. The problem is that "find -delete" can be made to do chdir".." multiple times followed by unlink and/or rmdir...