frompartsunknown/evilsuncheckThis is a little Python script to detect the "EvilSun" vulnerability (CVE-2020-14871) on Solaris systems. The vulnerability is a buffer overflow in the Pluggable Authentication Module (PAM) `pam_unix_auth` when handling keyboard-interactive authentication in SSH.
Solaris 시스템에서 "EvilSun" 취약점(CVE-2020-14871)을 탐지하는 간단한 Python 스크립트입니다. 이 취약점은 SSH에서 키보드 인터랙티브 인증 처리 시 Pluggable Authentication Module (PAM) pam_unix_auth에서 발생하는 버퍼 오버플로우입니다. 성공적인 익스플로잇은 잠재적으로 원격 코드 실행 또는 서비스 거부로 이어질 수 있습니다.
paramiko 라이브러리pip3 install -r requirements.txt
/etc/ssh/sshd_config에서 PAMAuthenticationViaKBDInt를 'yes'로 설정한 경우, 취약한 상태를 나타내는 다음 출력이 예상됩니다:
[*] Connecting to hostname 192.168.100.12 port: 22
[*] Using payload: ['AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA']
[*] Authentication failed: Authentication failed: transport shut down or saw EOF
[-] !!!!!!! VULNERABLE !!!!!!!
/etc/ssh/sshd_config에서 PAMAuthenticationViaKBDIn을 'no'로 설정한 경우, 취약하지 않은 상태를 나타내는 다음 출력이 예상됩니다 (적어도 Sun SSHd의 경우):
[*] Connecting to hostname 192.168.100.12 port: 22
[*] Authentication failed: Authentication failed.
현재 테스트되지 않음.