CVE-2018-10933 PoC — libssh server-side state machine 安全漏洞

Source

https://github.com/SoledaD208/CVE-2018-10933

Associated Vulnerability

Title:libssh server-side state machine 安全漏洞 (CVE-2018-10933)
Description:A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.

Description

CVE-2018-10933 very simple POC

Readme

# CVE-2018-10933
to test this code: 
- get vulnerable version of libssh at homepage: https://www.libssh.org/files/0.7/libssh-0.7.4.tar.xz
- uncompress and build, then go to example directory, there's a simple sshd server using libssh name: samplesshd-cb

run this simple sshd by command:
    $ samplesshd-cb 127.0.0.1 -p 2222

- run my code, output will be:
	Allocated session channel
	Allocated shell
mean that i can bypass authentication and spawn a shell without any credential

File Snapshot


 [4.0K]  /data/pocs/e03e61d7de836602c3b4e036a5e39231338668c8
├── [1.5K]  CVE-2018-10933.py
├── [ 481]  README.md
└── [  16]  requirements.txt

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!