CVE-2018-10933 PoC — libssh server-side state machine 安全漏洞

Source

https://github.com/likescam/CVE-2018-10933_ssh

Associated Vulnerability

Title: libssh server-side state machine 安全漏洞 (CVE-2018-10933)
Description:A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.

Readme

# CVE-2018-10933
to test this code: 
- get vulnerable version of libssh at homepage: https://www.libssh.org/files/0.7/libssh-0.7.4.tar.xz
- uncompress and build, then go to example directory, there's a simple sshd server using libssh name: samplesshd-cb

run this simple sshd by command:
    $ samplesshd-cb 127.0.0.1 -p 2222

- run my code, output will be:
	Allocated session channel
	Allocated shell
mean that i can bypass authentication and spawn a shell without any credential

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →