# N/A
## 漏洞概述
在 libssh 的服务器端状态机中发现了一个漏洞，该漏洞允许恶意客户端在未进行身份验证的情况下创建通道，从而导致未经授权的访问。
## 影响版本
- 0.7.6 之前的版本
- 0.8.4 之前的版本
## 漏洞细节
恶意客户端可以在未进行身份验证的情况下创建通道。
## 影响
此漏洞可能导致未经授权的访问。
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | CVE-2018-10933 very simple POC | https://github.com/SoledaD208/CVE-2018-10933 | POC详情 |
| 2 | Spawn to shell without any credentials by using CVE-2018-10933 (LibSSH) | https://github.com/blacknbunny/CVE-2018-10933 | POC详情 |
| 3 | CVE-2018-10933 sshlib user authentication attack - docker lab, test and exploit | https://github.com/hook-s3c/CVE-2018-10933 | POC详情 |
| 4 | Leveraging it is a simple matter of presenting the server with the SSH2_MSG_USERAUTH_SUCCESS message, which shows that the login already occurred without a problem. The server expects the message SSH2_MSG_USERAUTH_REQUEST to start the authentication procedure, but by skipping it an attacker can log in without showing any credentials. | https://github.com/kn6869610/CVE-2018-10933 | POC详情 |
| 5 | Script to identify hosts vulnerable to CVE-2018-10933 | https://github.com/gojhonny/libssh-scanner | POC详情 |
| 6 | None | https://github.com/likescam/CVE-2018-10933_ssh | POC详情 |
| 7 | None | https://github.com/likescam/CVE-2018-10933-libSSH-Authentication-Bypass | POC详情 |
| 8 | Hunt for and Exploit the libSSH Authentication Bypass (CVE-2018-10933) | https://github.com/marco-lancini/hunt-for-cve-2018-10933 | POC详情 |
| 9 | cve-2018-10933 libssh authentication bypass | https://github.com/hackerhouse-opensource/cve-2018-10933 | POC详情 |
| 10 | None | https://github.com/cve-2018/cve-2018-10933 | POC详情 |
| 11 | libssh CVE-2018-10933 | https://github.com/jas502n/CVE-2018-10933 | POC详情 |
| 12 | Variant of hackerhouse-opensource/cve-2018-10933 | https://github.com/ninp0/cve-2018-10933_poc | POC详情 |
| 13 | None | https://github.com/pghook/CVE-2018-10933_Scanner | POC详情 |
| 14 | LibSSH Authentication Bypass Exploit using RCE | https://github.com/Virgula0/POC-CVE-2018-10933 | POC详情 |
| 15 | CVE-2018-10933 | https://github.com/shifa123/pythonprojects-CVE-2018-10933 | POC详情 |
| 16 | a python script to exploit libssh authentication vulnerability | https://github.com/xFreed0m/CVE-2018-10933 | POC详情 |
| 17 | CVE-2018-10933 | https://github.com/Bifrozt/CVE-2018-10933 | POC详情 |
| 18 | CVE-2018-10933 POC (LIBSSH) | https://github.com/r3dxpl0it/CVE-2018-10933 | POC详情 |
| 19 | A libssh CVE-2018-10933 scanner written in rust | https://github.com/ivanacostarubio/libssh-scanner | POC详情 |
| 20 | None | https://github.com/throwawayaccount12312312/precompiled-CVE-2018-10933 | POC详情 |
| 21 | Multi-threaded, reliable scanner for CVE-2018-10933. | https://github.com/reanimat0r/bpnd-libssh | POC详情 |
| 22 | None | https://github.com/ensimag-security/CVE-2018-10933 | POC详情 |
| 23 | Implementation of CVE-2018-10933 with CIDR block scanner | https://github.com/0xadaw/libSSH-bypass | POC详情 |
| 24 | libSSH bypass | https://github.com/sambiyal/CVE-2018-10933-POC | POC详情 |
| 25 | LibSSH Authentication Bypass CVE-2018-10933 | https://github.com/nikhil1232/LibSSH-Authentication-Bypass | POC详情 |
| 26 | Takes advantage of CVE-2018-10933 | https://github.com/Kurlee/LibSSH-exploit | POC详情 |
| 27 | None | https://github.com/crispy-peppers/Libssh-server-CVE-2018-10933 | POC详情 |
| 28 | Authentication Bypass in Server Code for LibSSH | https://github.com/youkergav/CVE-2018-10933 | POC详情 |
| 29 | None | https://github.com/kristyna-mlcakova/CVE-2018-10933 | POC详情 |
| 30 | None | https://github.com/lalishasanduwara/CVE-2018-10933 | POC详情 |
| 31 | CVE-2018-10933_Scanner | https://github.com/JoSecMx/CVE-2018-10933_Scanner | POC详情 |
| 32 | None | https://github.com/cyberharsh/Libssh-server-CVE-2018-10933 | POC详情 |
| 33 | libSSH-Authentication-Bypass | https://github.com/Rubikcuv5/CVE-2018-10933 | POC详情 |
| 34 | None | https://github.com/SilasSpringer/CVE-2018-10933 | POC详情 |
| 35 | Proof of Concept for CVE-2018-10933 | https://github.com/HSw109/CVE-2018-10933-PoC | POC详情 |
| 36 | Proof of Concept for CVE-2018-10933 | https://github.com/HSw109/CVE-2018-10933 | POC详情 |
| 37 | Script to identify hosts vulnerable to CVE-2018-10933 | https://github.com/jobroche/libssh-scanner | POC详情 |
| 38 | None | https://github.com/likekabin/CVE-2018-10933_ssh | POC详情 |
| 39 | None | https://github.com/likekabin/CVE-2018-10933-libSSH-Authentication-Bypass | POC详情 |
| 40 | None | https://github.com/Threekiii/Awesome-POC/blob/master/%E5%85%B6%E4%BB%96%E6%BC%8F%E6%B4%9E/Libssh%20%E6%9C%8D%E5%8A%A1%E7%AB%AF%E6%9D%83%E9%99%90%E8%AE%A4%E8%AF%81%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E%20CVE-2018-10933.md | POC详情 |
| 41 | https://github.com/vulhub/vulhub/blob/master/libssh/CVE-2018-10933/README.md | POC详情 | |
| 42 | LibSSH authentification bypass | https://github.com/bidaoui4905/CVE-2018-10933 | POC详情 |
暂无评论