(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 2.1 or higher.
CVE-2000-0992
PKCS#1 Version 1.5 Session Key Retrieval
PVS ID: 1971 FAMILY: SSH
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw which allows attackers to retrieve
sensitive files or data.\n\nThe remote host is using version 1.5 of the SSH protocol. This
version allows a remote attacker to decrypt and/or alter traffic via an attack against
PKCS#1 version 1.5, called the 'Bleichenbacher' attack. OpenSSH up to version 2.3.0,
AppGate and SSH Communications Security ssh1 update to version 1.2.31 are vulnerable
to this attack.
Solution: Upgrade to the latest version of OpenSSH/SSH.
CVE-2001-0361
SSH RSAREF Library Multiple Overflows
PVS ID: 1972 FAMILY: SSH RISK: HIGH NESSUS ID:10269
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of SSH which is older (or as old as) 1.2.27. If this version was compiled
against the RSAREF library (which can not be determined remotely), then it is very likely
to be vulnerable to a buffer overflow that may allow an attacker to obtain a root shell on
this host. To determine if SSH has been compiled against the RSAREF library, log into the
remote host and type 'ssh -V'
Solution: Upgrade to SSH 2.x or do not use the RSAREF library.
CVE-1999-0834
SSH Multiple Vulnerabilities
PVS ID: 1973 FAMILY: SSH RISK: HIGH NESSUS ID:11195
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote SSH
server is vulnerable to various vulnerabilities that may allow an attacker to obtain a root
shell on this host.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2002-1360
SSH Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 1974 FAMILY: SSH RISK: HIGH NESSUS ID:11195
Family Internet Services 503