CVE-2018-15473
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
Github link:
https://github.com/moften/cve-2018-15473-poc
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
Github link:
https://github.com/moften/cve-2018-15473-poc
GitHub
GitHub - moften/cve-2018-15473-poc: Check if a username is valid on the SSH server by attempting an authentication. The server…
Check if a username is valid on the SSH server by attempting an authentication. The server response will indicate whether the username exists. - moften/cve-2018-15473-poc