Exploitation Summary
EIP tracks 2 public exploits for CVE-2002-20001. PoCs published by c0r0n3r, itmaniac.
AI-analyzed exploit summary This repository contains a functional proof-of-concept implementation of the D(HE)at attack (CVE-2002-20001), targeting TLS/SSH services with DHE support. The code includes threading, packet crafting, and network interaction to exploit the vulnerability.
Description
The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.
Exploits (2)
This repository contains a functional proof-of-concept implementation of the D(HE)at attack (CVE-2002-20001), targeting TLS/SSH services with DHE support. The code includes threading, packet crafting, and network interaction to exploit the vulnerability.
This repository contains a functional Python script that simulates a D(HE)at DoS attack against SSH services by rapidly establishing multiple TCP connections to measure connection rates and potential vulnerability to CVE-2002-20001. The script uses threading to concurrently attempt connections and tracks success/failure rates to determine if the target is potentially vulnerable.
References (13)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H