CVE-2016-20012
MEDIUMOpenSSH <= 8.7 - Unauthenticated User Enumeration via Public Key Validation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2016-20012. PoCs published by arturo-b-cmu.
AI-analyzed exploit summary This Python script performs SSH username enumeration by measuring response times for invalid password attempts, leveraging timing differences to identify valid usernames. It uses the `paramiko` library to automate connection attempts and calculates statistical metrics for analysis.
Description
OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product
Exploits (1)
This Python script performs SSH username enumeration by measuring response times for invalid password attempts, leveraging timing differences to identify valid usernames. It uses the `paramiko` library to automate connection attempts and calculates statistical metrics for analysis.
References (8)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N