OpenBSD 6.6 多個驗證繞過弱點

critical Nessus Plugin ID 134384

語言:

版本 1.227 Oct 21, 2025, 3:09 AM Logic Changes (Implement workaround in SSH library to prevent triggering an engine bug.) Plugin Feed: 202510210309
版本 1.226 Sep 30, 2025, 12:41 AM Logic Changes (Add extra checks to see whether plugins should run. Modernisation of the HTTP/1 library. Various corrections and fixes for CPE related Flatline Test Failures. Remove spurious authentication header.) Plugin Feed: 202509300041
版本 1.225 Aug 26, 2025, 7:20 AM Logic Changes Plugin Feed: 202508260720
版本 1.224 Jul 28, 2025, 4:47 PM Logic Changes (RSA SSH certificates can use SHA2 signatures when needed) Plugin Feed: 202507281647
版本 1.223 Jul 15, 2025, 2:39 AM Logic Changes Plugin Feed: 202507150239
版本 1.222 Jun 27, 2025, 8:01 PM Logic Changes Plugin Feed: 202506272001
版本 1.221 Jun 16, 2025, 4:11 PM Logic Changes (Validate X509 certificates against CA's CRL in preference to OCSP.) Plugin Feed: 202506161611
版本 1.220 May 28, 2025, 9:47 AM Logic Changes (Streamline SSH compatibility code) Plugin Feed: 202505280947
版本 1.219 Apr 28, 2025, 4:40 PM Logic Changes (Handling absence of SSH privilege escalation uniformly across products) Plugin Feed: 202504281640
版本 1.218 Apr 1, 2025, 12:23 AM Logic Changes (Handle Cisco devices that echo command and prompt before command results.) Plugin Feed: 202504010023
版本 1.217 Mar 20, 2025, 7:47 AM Detection (Handle DISA /etc/profile.d/ssh_confirm.sh consent prompt.) Plugin Feed: 202503200747
版本 1.216 Mar 6, 2025, 7:23 AM Detection (Handle long MOTD with pagination on Nokia devices.) Plugin Feed: 202503060723
版本 1.215 Mar 3, 2025, 5:54 PM Logic Changes (improve detection for some devices) Plugin Feed: 202503031754
版本 1.214 Feb 12, 2025, 3:29 PM Logic Changes Plugin Feed: 202502121529
版本 1.213 Feb 12, 2025, 1:58 AM Logic Changes Plugin Feed: 202502120158
版本 1.212 Feb 10, 2025, 4:00 PM Logic Changes Plugin Feed: 202502101600
版本 1.211 Jan 21, 2025, 6:17 PM Logic Changes (Tighten recognition of need to escalate.) Detection (Add SSH local checks support for Union Tech UOS) Plugin Feed: 202501211817
版本 1.208 Jan 13, 2025, 10:27 PM New Plugin Feed: 202501132227
版本 1.206 Dec 30, 2024, 4:30 PM Logic Changes (Catch errors when rehoming find commands under sudo escalation. Ensure escalation user home with tilde.) Plugin Feed: 202412301630
版本 1.205 Dec 18, 2024, 9:32 PM Detection (Set a prompt of our own in 'nix shells to handle misconfigured scan user prompts) Plugin Feed: 202412182132
版本 1.204 Dec 18, 2024, 7:05 AM Detection (Fixed SSH authentication using the "none" method) Plugin Feed: 202412180705
版本 1.203 Dec 6, 2024, 8:13 PM Detection (Better debugging related to local checks evaluations) Plugin Feed: 202412062013
版本 1.202 Dec 3, 2024, 3:59 PM Detection (Support Azure Linux for generated package plugins.) Plugin Feed: 202412031559
版本 1.201 Nov 6, 2024, 2:41 PM Detection (adding support for Forescout CounterACT) Plugin Feed: 202411061441
版本 1.200 Oct 10, 2024, 4:58 AM Detection (Change dir to $HOME before find commands to handle weird find behavior with escalation.) Plugin Feed: 202410100458
版本 1.198 Sep 11, 2024, 5:35 PM New (Detects QUIC servers running on the target. Implement a NASL QUIC library to support detection of HTTP/3 and possibly more) Plugin Feed: 202409111735
版本 1.197 Sep 3, 2024, 11:47 PM Logic Changes (additional data collection for runtime scanning. fixed logic bug causing potential false negatives. fixed logic bug causing potential false positives. fixed logic bug with potential to break cyberark logins) Plugin Feed: 202409032347
版本 1.196 Sep 3, 2024, 5:26 PM Detection (Support for Aruba CPPM SSH based local checks) Plugin Feed: 202409031726
版本 1.195 Aug 14, 2024, 8:33 PM Logic Changes (Endianness fix in Kerberos authentication for SCAP scanning) Plugin Feed: 202408142033
版本 1.194 Aug 8, 2024, 4:43 PM Logic Changes (Support OpenSSH private key formats for authentication.) Plugin Feed: 202408081643
版本 1.193 Jul 24, 2024, 6:31 PM Logic Changes (Modernize SSH usage to optimize behavior on Nessus Agents.. adding AI family) Plugin Feed: 202407241831
版本 1.192 Jul 17, 2024, 11:02 PM Logic Changes Plugin Feed: 202407172302
版本 1.191 Jul 6, 2024, 12:22 AM Detection (Changes to support Juniper Session Smart Router) Plugin Feed: 202407060022
版本 1.190 Jul 5, 2024, 9:04 PM Detection (Adding detection of Juniper SSR devices) Plugin Feed: 202407052104
版本 1.189 Jun 27, 2024, 9:09 PM New (Deploy nessus_utils binaries on the Nessus Agent) Plugin Feed: 202406272109
版本 1.188 Jun 21, 2024, 6:31 PM Detection (updated detection for SonicOS devices) Plugin Feed: 202406211831
版本 1.187 Jun 21, 2024, 2:16 PM Logic Changes Plugin Feed: 202406211416
版本 1.186 May 20, 2024, 10:13 AM Logic Changes Plugin Feed: 202405201013
版本 1.185 Mar 19, 2024, 6:40 PM Logic Changes (Improving logging to reduce disk space usage) Plugin Feed: 202403191840
版本 1.180 Jan 16, 2024, 8:55 PM Logic Changes (Improving debug logging) Plugin Feed: 202401162055
版本 1.178 Jan 16, 2024, 5:39 PM Detection (Add carrier grade NAT IPs to the IPv4 private address ranges.. Support privacy mode DCOM over Kerberos) Logic Changes (Improving debug logging) Plugin Feed: 202401161739
版本 1.175 Dec 6, 2023, 12:08 AM Logic Changes (Fixes bug in special case shell handling logic.) Plugin Feed: 202312060008
版本 1.174 Dec 5, 2023, 9:49 PM Logic Changes (Fixes bug in special case shell handling logic.) Plugin Feed: 202312052149
版本 1.173 Nov 28, 2023, 11:17 AM Detection (Fixing detection of Cisco Firepower devices) Plugin Feed: 202311281117
版本 1.172 Nov 27, 2023, 6:11 PM Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.) Plugin Feed: 202311271811
版本 1.171 Nov 14, 2023, 4:21 PM Detection (Support SHA2 based encryption for Kerberos) Plugin Feed: 202311141621
版本 1.171 Nov 27, 2023, 4:16 PM Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.) Plugin Feed: 202311271616
版本 1.170 Oct 30, 2023, 1:08 PM Detection (Fixed detection of JUNOS) Plugin Feed: 202310301308
版本 1.169 Oct 25, 2023, 5:17 PM Detection (Handle SSH exec hang and pagination ctrl codes for PanOS) Plugin Feed: 202310251717
版本 1.164 Oct 4, 2023, 11:07 PM Detection (Fixed Cisco Firepower detection) Plugin Feed: 202310042307
版本 1.163 Sep 26, 2023, 8:16 PM Logic Changes Plugin Feed: 202309262016
版本 1.160 Jul 24, 2023, 7:10 PM Logic Changes (added debugging) Plugin Feed: 202307241910
版本 1.158 Jul 17, 2023, 5:15 PM Logic Changes (Make torture_cgi library PCP clean and consolidate utf16_to_ascii(). Permit CIDR entries in target priority list) Plugin Feed: 202307171715
版本 1.156 Jul 10, 2023, 7:11 PM Logic Changes (Restrict ClientHello ciphersuites by encapsulation) Plugin Feed: 202307101911
版本 1.155 Jul 5, 2023, 9:03 PM Logic Changes (added ingestion and ability of target priority lists for SSH credentials) Plugin Feed: 202307052103
版本 1.154 Jun 20, 2023, 9:07 PM Logic Changes (Temporarily limit debug logging) Plugin Feed: 202306202107
版本 1.149 Jun 1, 2023, 5:27 AM Logic Changes (Better logging) Plugin Feed: 202306010527
版本 1.148 May 18, 2023, 1:08 AM Detection (Port Alcatel-Lucent OmniSwitch support from ssh_get_info.nasl to ssh_lib as a rate limited device.) Plugin Feed: 202305180108
版本 1.146 May 16, 2023, 7:02 PM Detection (Authenticate WMI/DCOM using Kerberos credentials.) Plugin Feed: 202305161902
版本 1.144 May 1, 2023, 9:07 PM Detection (Make and use compatibility wrapper for running commands on scanner localhost to handle deprecation of pread().) Plugin Feed: 202305012107
版本 1.141 Apr 6, 2023, 6:58 PM Detection (Add Kerberos debug logging) Plugin Feed: 202304061858
版本 1.139 Mar 8, 2023, 1:05 AM Logic Changes Plugin Feed: 202303080105

* Changelogs are generally available for changes made after Nov 1, 2022