CVE-2018-10933 libssh authentication bypass 漏洞浅析 - thinkycx.me

thinkycx / thinkycx.me-comments

0 stars 0 forks source link

Open thinkycx opened 6 years ago

thinkycx commented 6 years ago

本月19号和21号看了一下CVE-2018-10933 libssh的authentication bypass这个漏洞，记录一下整个过程。

thinkycx commented 6 years ago

20181022 xlab动态推送：

[ SecurityAdvisory ] Cisco 发布 2018 年 10 月安全公告，公布受 libssh 身份验证漏洞影响的思科产品信息： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181019-libssh

thinkycx commented 6 years ago

疑似人为在libssh中引入后门，弗为@阿里分析报告：https://www.anquanke.com/post/id/162535