Date: 10 months ago   Category: Hi-Tech

One more vulnerability in OpenSSH allowing to define presence of users


Less than a week later from the moment of detection of last problem in OpenSSH allowing to define whether there is a user with this name in system, one more similar vulnerability (CVE-2018-15919) is revealed. The problem is present since 2011 and is shown including in a few days ago the published release of OpenSSH 7.8.

the Offered method is based on various behavior of a code of authentication on the basis of API GSS2 for the existing and not existing users. In particular, if the user doesn't exist, then the repeating attempts of authentication lead to break of connection with return of an error of "Too many authentication failures". For the existing users the similar mistake isn't removed.

can In addition note identification of a possibility of definition of existence of the user in the Dropbear SSH server which is often used on the built-in devices and home routers. The vulnerability (CVE-2018-15599) revealed in Dropbear repeats last problem in OpenSSH (the exploit for OpenSSH works for Dropbear). On materials: www.opennet.ru

URL:




Today

just now

Alla Pugacheva tremblingly congratulated Maxim Galkin, having posted a joint photo. "My darling, HAPPY BIRTHDAY!!!???", - Pugacheva gently signed. Followers remained delighted: "It is not age, and i...

just now

Met children by "reek of alcohol"? Yulia risks not only beauty and health, but also kids. Yulia Baranovskaya shared a family selfie since morning on which she poses with Yana and Arseny. "Mine retur...

just now

On June 18 the official site of the National Bank of Ukraine (NBU) was under external DDoS the attack and worked in the limited mode. The press service of the NBU in Facebook reported about it. Of N...

just now

Naftogaz returned 500 million dollars of the credit taken under guarantees of the World Bank. The company used means within two years. of NAK Naftogaz Ukrainy returned the credit of 500 million doll...

just now

In the north of Japan - an earthquake measuring 6.8. Strong pushes were felt in prefectures Niigata, Isikava, Yamagata and Toyama. The Russian Consulate General in Niigata emphasized that there are no victims among diplomats. Evacuation of diplomats was not undertaken. There are no data on Russians injured with an earthquake. meanwhile, is announ...

just now

"Hammers" against the background of interest in the defender Issah Diop from the MU made the counter proposal to mankunianets. The Independent reports about it. West Ham wants to issue the transacti...

just now

From native Varna Philip Kirkorov came back together with the children Alla-Victoria and Martin. In Bulgaria the actor spent several days on tours. - We came back to Moscow on "Boeing" of S7 airline, - the passenger of the plane in whom there was an actor with the family told KP. - When landing there was a blow (chassis hit against a landing stri...

just now

Russia began to take on June 17 orders for a car of Supra A90 Edition from the Toyota brand. At the same time for our country three copies of a car from the available ninety units are provided. All...