漏洞描述 【漏洞对象】OpenSSH<br>【涉及版本】openssh版本<=7.7<br>【漏洞描述】<br>OpenSSH7.7及之前版本中存在安全漏洞,该漏洞源于程序会对有效的和无效的身份验证请求发出不同的响应。攻击者可通过发送特制的请求利用该漏洞枚举用户名称。
相关漏洞推荐 POC CVE-2025-32433: Erlang/OTP SSH - Remote Code Execution POC CVE-2018-16059: WirelessHART Fieldgate SWG70 3.0 - Local File Inclusion POC CVE-2023-48795: OpenSSH Terrapin Attack - Detection POC CVE-2001-1473: Deprecated SSHv1 Protocol Detection POC CVE-2001-1473: Deprecated SSHv1 Protocol Detection POC unrestricted-ssh-access: Unrestricted - SSH Access POC iam-ssh-keys-rotation: SSH Key Rotation - 90-Day Policy POC gcloud-vm-project-ssh-keys-enabled: Block Project-Wide SSH Keys Not Enabled POC ssh-gssapiauthentication-disabled: sshd GSSAPIAuthentication - Disabled POC ssh-hostbasedauth-disabled: Ensure SSH HostbasedAuthentication - Disabled POC privesc-ssh-agent: ssh-agent - Privilege Escalation POC privesc-sshpass: sshpass - Privilege Escalation POC file-disable-ssh-forwarding: Disable SSH Forwarding