(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to an flaw that allows attackers to execute
arbitrary commands.\n\nThe remote host is running a version of SSH which is older than
(or as old as) 1.2.23. This version is vulnerable to a known plaintext attack that may allow
an attacker to insert encrypted packets in the client - server stream that will be deciphered
by the server, thus allowing an attacker to execute arbitrary commands on the remote
server.
Solution: Upgrade to SSH-1.2.25 or higher.
CVE-1999-1085
OpenSSH Client < 2.3.0 X11 Unauthorized Remote Forwarding
PVS ID: 1979 FAMILY: SSH RISK: HIGH NESSUS ID:11343
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\nThe remote host is running OpenSSH SSH client older than 2.3.0.
This version does not properly disable X11 or agent forwarding, which could allow a rogue
SSH server to gain access to the X11 display of the client and eavesdrop X11 events.
Solution: Upgrade to version 2.3.0 or higher.
CVE-2000-1169
SSH1 CRC-32 detect_attack Function Overflow
PVS ID: 1980 FAMILY: SSH RISK: HIGH NESSUS ID:10607
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
using a version of SSH.com's SSH older than version 1.2.32 or a version of OpenSSH older
than 2.3.0. These versions are vulnerable to a buffer overflow that may allow an attacker to
obtain a root shell on this host.
Solution: Upgrade to SSH.com's SSH 1.2.32 or OpenSSH 2.3.0 or higher.
CVE-2001-0144
SSH-1 < 1.2.31 SSH Daemon Account Login Attempt Logging Failure
PVS ID: 1981 FAMILY: SSH RISK: HIGH NESSUS ID:11341
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote SSH daemon does not log repeated login attempts, which allows an
attacker to set up a brute force attack to guess the user accounts/passwords of on this host.
Solution: Upgrade to SSH 1.2.31 or higher.
CVE-2001-0471
Passive Vulnerability Scanner (PVS) Signatures
SSH < 3.1.2 AllowedAuthentications Remote Bypass
Family Internet Services 505