CVEs-PoC/2011/CVE-2011-5000.md

CVE-2011-5000

Description

The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/DButter/whitehat_public
• https://github.com/Dokukin1/Metasploitable
• https://github.com/George210890/13-01.md
• https://github.com/Iknowmyname/Nmap-Scans-M2
• https://github.com/NikulinMS/13-01-hw
• https://github.com/SergeiShulga/13_1
• https://github.com/VictorSum/13.1
• https://github.com/Wernigerode23/Uiazvimosty
• https://github.com/Zhivarev/13-01-hw
• https://github.com/bralbral/ipinfo.sh
• https://github.com/kaio6fellipe/ssh-enum
• https://github.com/smabramov/Vulnerabilities-and-attacks-on-information-systems
• https://github.com/syadg123/pigat
• https://github.com/tchivert/ipinfo.sh
• https://github.com/teamssix/pigat
• https://github.com/vioas/Vulnerabilities-and-attacks-on-information-systems
• https://github.com/zzzWTF/db-13-01