(PVS) Signatures - Tenable Network Security

and eventually get access to this host.
Solution: Upgrade F-Secure SSH to a version greater than 3.1.
SSH Server Detection
CVE Not available
PVS ID: 1967 FAMILY: SSH RISK: NONE NESSUS ID:10267
Description: The remote host is running a SSH server : \n %L
Solution: N/A
SSH Client Detection
CVE Not available
PVS ID: 1968 FAMILY: SSH RISK: NONE NESSUS ID:Not Available
Description: The remote host is running a SSH client: %L
Solution: N/A
CVE Not available
SSH < 3.1.5 / 3.2.2 setsid() Privilege Escalation
PVS ID: 1969 FAMILY: SSH RISK: HIGH NESSUS ID:11169
Description: Synopsis :\n\nThe remote host may allow users to escalate privileges.\n\nThe remote host is
running a version of the SSH server which is older than version 3.1.5 or 3.2.2. There is a
vulnerability in this version which may allow a user to obtain higher privileges due to a
flaw in the way setsid() is used. The remote host is running : %L
Solution: Upgrade to version 3.1.5, 3.2.2 or higher.
CVE-2002-1644
scp < 2.1 Traversal File Create/Overwrite
PVS ID: 1970 FAMILY: SSH
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:11339
Description: Synopsis :\n\nThe remote server may allow attackers to retrieve or modify sensitive
files.\n\nThe remote host is running SSH 1.2.3 or 1.2 (as a client). There is a vulnerability
in this version that allows a malicious scp server to overwrite arbitrary files via a directory
traversal bug. An attacker may use this flaw to compromise this host. To exploit it, the
attacker would have to compromise a host to which users of this host are SSH'ing into, and
then to set up a trojaned version of scp which would overwrite files on this host
Family Internet Services 502