frompartsunknown/evilsuncheckThis is a little Python script to detect the "EvilSun" vulnerability (CVE-2020-14871) on Solaris systems. The vulnerability is a buffer overflow in the Pluggable Authentication Module (PAM) `pam_unix_auth` when handling keyboard-interactive authentication in SSH.
Este é um pequeno script Python para detectar a vulnerabilidade "EvilSun" (CVE-2020-14871) em sistemas Solaris. A vulnerabilidade é um estouro de buffer no Módulo de Autenticação Plugável (PAM) pam_unix_auth ao lidar com autenticação interativa por teclado no SSH. Uma exploração bem-sucedida poderia potencialmente levar à execução remota de código ou negação de serviço.
paramikopip3 install -r requirements.txt
Quando o /etc/ssh/sshd_config foi configurado com PAMAuthenticationViaKBDInt 'yes' você pode esperar a seguinte saída indicando um estado vulnerável:
[*] Connecting to hostname 192.168.100.12 port: 22
[*] Using payload: ['AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA']
[*] Authentication failed: Authentication failed: transport shut down or saw EOF
[-] !!!!!!! VULNERABLE !!!!!!!
Quando o /etc/ssh/sshd_config foi configurado com PAMAuthenticationViaKBDIn 'no' você pode esperar a seguinte saída indicando um estado não vulnerável (para Sun SSHd de qualquer forma):
[*] Connecting to hostname 192.168.100.12 port: 22
[*] Authentication failed: Authentication failed.
Atualmente não testado.