Title:SSHD Error Message CVE-2018-15473 Status:test Description:Detects exploitation attempt using public exploit code for CVE-2018-15473 References: -https://github.com/Rhynorater/CVE-2018-15473-Exploit Author: Florian Roth (Nextron Systems) Date: 2017-08-24 modified:2021-11-27 Tags:
-'attack.reconnaissance'
-'attack.t1589'
Logsource:
product: linux
service: sshd
Detection: keywords: - 'error: buffer_get_ret: trying to get more bytes 1907 than in buffer 308 [preauth]' condition:keywords Falsepositives:
-Unknown Level:medium
