Paramiko SSH Server Authentication Bypass Vulnerability [CVE-2018-1000805]
CVE Number – CVE-2018-1000805
A vulnerability in the Secure Shell (SSH) server functionality of Paramiko could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary code on a targeted system.
The vulnerability exists in the Transport class of the affected software and could allow an authentication bypass in the paramiko/auth_handler.py source code file. An attacker could exploit this vulnerability by sending a crafted message to a targeted Paramiko server that sets the attacker-controlled system as authenticated. A successful exploit could allow the attacker to execute arbitrary code on the targeted system.
Paramiko has confirmed the vulnerability and released software updates.
-
This vulnerability affects the server-side functionality of Paramiko. Paramiko used only for client-side functionality is not affected by this vulnerability.
-
Administrators are advised to apply the appropriate updates.
Administrators are advised to allow only trusted users to have network access.
Administrators are advised to run both firewall and antivirus applications to minimize the potential of inbound and outbound threats.
Administrators may consider using IP-based access control lists (ACLs) to allow only trusted systems to access the affected systems.
Administrators can help protect affected systems from external attacks by using a solid firewall strategy.
Administrators are advised to monitor affected systems.
-
Paramiko has released an issue report at the following link: Issue #1283
-
Paramiko has a software patch and updates at the following links: Fix and changelog re #1283 and Paramiko 2.4.2, 2.3.3, 2.2.2, 2.1.6, and 2.0.9
Duncan is a technology professional with over 20 years experience of working in various IT roles. He has a interest in cyber security, and has a wide range of other skills in radio, electronics and telecommunications.