Skip to content

Latest commit

 

History

History
executable file
·
45 lines (31 loc) · 1.11 KB

README.md

File metadata and controls

executable file
·
45 lines (31 loc) · 1.11 KB
Raw

CVE-2018-15473

About

https://nvd.nist.gov/vuln/detail/CVE-2018-15473

PoC / Exploit

Environment used

  • Ubuntu 18.04.3 LTS
  • OpenSSH 7.6

Reproduction

  • Server

    • Docker version:

      docker run --rm -p 8022:22 -it simaofsilva/cve-2018-15473

    • Script version:

      sudo bash installation.sh
bash init.sh

  • Client

docker run --rm -it simaofsilva/cve-2018-15473-client

The result should be a message like "{USERNAME} is (not) a valid user!"

Note: When using client and server in the same machine, in the client the IP to use is 172.17.0.1, in case of default Docker configs.

Links