信息安全 - 哪个 ssh 漏洞通过在进程中间更改用户名来工作？ - 吾爱随笔录

每隔几个小时，我就会在我的服务器日志中看到其中的一些：

sshd[...]: Disconnecting: Change of username or service not allowed: (httpd,ssh-connection) -> (http,ssh-connection) [preauth]
sshd[...]: Disconnecting: Change of username or service not allowed: (identd,ssh-connection) -> (ident,ssh-connection) [preauth]
sshd[...]: Disconnecting: Change of username or service not allowed: (administrator,ssh-connection) -> (admin,ssh-connection) [preauth]
sshd[...]: Disconnecting: Change of username or service not allowed: (admins,ssh-connection) -> (admin,ssh-connection) [preauth]
sshd[...]: Disconnecting: Change of username or service not allowed: (admissions,ssh-connection) -> (adm,ssh-connection) [preauth]

...other attempts of the same kind: tony -> to, users -> user, wwwrun -> www, ...

显然，有人试图混淆我的 ssh 守护进程，首先将自己标识为foo然后再标识为somePrefixOfFoo（显然没有成功）。

SSH 中是否存在或是否存在允许此类攻击成功的特定漏洞？