(PVS) Signatures - Tenable Network Security

PVS ID: 1982 FAMILY: SSH RISK: LOW NESSUS ID:10965
Description: Synopsis : \n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running a version of the SSH daemon older than 3.1.2 or
equal to 3.0.0. There is a vulnerability in this release that may, under some circumstances,
allow users to authenticate using a password whereas it is not explicitly listed as a valid
authentication mechanism. An attacker may use this flaw to brute force a password using a
dictionary attack (if the password used is weak). The remote server is running SSH version:
\n %L
Solution: Upgrade to SSH 3.1.2 or higher.
CVE-2002-1646
SSH < 3.0.1 Locked Account Remote Authentication Bypass
PVS ID: 1983 FAMILY: SSH
RISK:
MEDIUM
NESSUS ID:10708
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw which allows for the bypassing of
authentication.\n\nThe remote host is running SSH 3.0.0. There is a vulnerability in this
release which allows any user to log into accounts that have passwords of two characters
long or less. An attacker may gain root privileges using this flaw.
Solution: Upgrade to SSH 3.0.1 or higher.
CVE-2001-0553
Portable OpenSSH < 3.6.1p2 PAM Timing Side-Channel Weakness
PVS ID: 1984 FAMILY: SSH
RISK:
MEDIUM
NESSUS ID:11574
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is using a version of Portable OpenSSH that may allow an
attacker to determine if an account exists or not by a timing analysis.
Solution: Upgrade to OpenSSH-portable 3.6.1p2 or higher.
CVE-2003-0190
Passive Vulnerability Scanner (PVS) Signatures
OpenSSH < 2.3.2 SSHv2 Public Key Authentication Bypass
PVS ID: 1985 FAMILY: SSH RISK: HIGH NESSUS ID:10608
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote host is running OpenSSH 2.3.1. This version is vulnerable to
a flaw that allows any attacker who can obtain the public key of a valid SSH user to log
into this host without any authentication.
Family Internet Services 506