Git/ssh-audit
1
0 Fork 0
mirror of https://github.com/jtesta/ssh-audit.git synced 2026-10-27 11:31:29 +01:00
Code Issues Packages Projects Releases Wiki Activity

Added version check for OpenSSH user enumeration (CVE-2018-15473). (#83)

Browse Source
This commit is contained in:
Joe Testa committed 2020-11-05 20:24:09 -05:00
1 parent 5c8dc5105b
commit 0d9881966c
10 files changed
+14 -4
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

test/docker/expected_results/openssh_4.0p1_test1.txt
+1
View File
@@ -6,6 +6,7 @@
(gen) compression: enabled (zlib)
# security
(cve) CVE-2018-15473 -- (CVSSv2: 5.3) enumerate usernames due to timing discrepencies
(cve) CVE-2016-3115 -- (CVSSv2: 5.5) bypass command restrictions via crafted X11 forwarding data
(cve) CVE-2014-1692 -- (CVSSv2: 7.5) cause DoS via triggering error condition (memory corruption)
(cve) CVE-2012-0814 -- (CVSSv2: 3.5) leak data via debug messages