CVE-2024-6387 PoC — Openssh: regresshion - race condition in ssh allows rce/dos

Source

https://github.com/oliferFord/CVE-2024-6387-SSH-RCE

Associated Vulnerability

Title: Openssh: regresshion - race condition in ssh allows rce/dos (CVE-2024-6387)
Description:A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

Readme

# CVE-2024-6387-Updated-SSH-RCE
CVE-2024-6387 for SSH RCE in Python [Update]
0day for OpenSSH's sshd on glibc-based Linux systems

> The repository provides a working variant of the CVE-2024-6387 vulnerability exploit with support for real-time active shell, multithreading, entering targets from a file, and color output.

## Description
An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server (sshd) on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to async-signal-unsafe functions being called in the SIGALRM handler.

## Exploit details
The exploit targets the SIGALRM handler race condition in OpenSSH's sshd, which calls async-signal-unsafe functions. This can be leveraged to achieve remote code execution as root.

## Vulnerable versions: 
OpenSSH 8.5p1 to 9.8p1

## Running

To run exploit you need Python 3.
Execute:
```bash
python exploit.py -h 1.1.1.1 -c 22
```

## Download
After payment, take a screenshot and send it to my email. I will answer within an hour.
olifer.ford@gmail.com 
Price 50usd
usdt trc20:
```
TMt5mkrjefAsiSK3h639MePzzW18G9Wz9A
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →