Detections
Analytics
CVE-2018-10933
critical
Description
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.
From the Tenable Blog
libssh Vulnerable to Authentication Bypass (CVE-2018-10933)
Published: 2018-10-17
A newly announced vulnerability in libssh, a multiplatform library that supports the Secure Shell (SSH) protocol, allows attackers to bypass authentication and gain full control over vulnerable servers.
References
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
https://www.debian.org/security/2018/dsa-4322
https://usn.ubuntu.com/3795-2/
https://usn.ubuntu.com/3795-1/
https://security.netapp.com/advisory/ntap-20190118-0002/
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0016
https://lists.debian.org/debian-lts-announce/2018/10/msg00010.html
https://www.tenable.com/blog/libssh-vulnerable-to-authentication-bypass-cve-2018-10933
https://www.tenable.com/blog/oracle-s-january-critical-patch-update-addresses-nearly-300-fixes
https://github.com/preetideepaksoni/Penetration-Testing-Portfolio
https://github.com/AbdulMoiz6692/cve-vulnerability-scanner-pro
https://github.com/RehmanAjaz/CVE-Scanner
https://github.com/Remnant-DB/CVE-2018-10933
https://github.com/ctf-noob/CVE
https://github.com/opsifiz/CVE-2018-10933
https://github.com/liminghjh/CVE-vulnerability-reproduction
https://github.com/JoSecMx/CVE-2018-10933_Scanner
https://github.com/Kurlee/LibSSH-exploit
https://github.com/nikhil1232/LibSSH-Authentication-Bypass
https://github.com/ivanacostarubio/libssh-scanner
https://github.com/Bifrozt/CVE-2018-10933
https://github.com/shifa123/pythonprojects-CVE-2018-10933
https://github.com/jas502n/CVE-2018-10933
https://github.com/marco-lancini/hunt-for-cve-2018-10933
https://github.com/trbpnd/bpnd-libssh
https://github.com/leapsecurity/libssh-scanner
https://github.com/hook-s3c/CVE-2018-10933
https://www.libssh.org/security/advisories/CVE-2018-10933.txt