(PVS) Signatures - Tenable Network Security

Solution: Upgrade to OpenSSH 2.3.2 or higher.
CVE-2001-1585
OpenSSH < 3.0.1 Multiple Vulnerabilities
PVS ID: 1986 FAMILY: SSH RISK: HIGH NESSUS ID:10802
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote host is running a version of OpenSSH that is older than
3.0.1. Versions older than 3.0.1 are vulnerable to a flaw in which an attacker may
authenticate, provided that Kerberos V support has been enabled (which is not the case by
default). It is also vulnerable to an excessive memory clearing bug, believed to be
unexploitable. *** You may ignore this warning if this host is not using Kerberos V
Solution: Upgrade to OpenSSH 3.0.1 or higher.
CVE-2002-0083
OpenSSH < 3.4 Multiple Remote Overflows
PVS ID: 1987 FAMILY: SSH RISK: HIGH NESSUS ID:11031
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of OpenSSH which is older than 3.4. There is a flaw in this version that
can be exploited remotely to give an attacker a shell on this host. Note that several
distributions patched this hole without changing the version number of OpenSSH. Note:
PVS solely relied on the banner of the remote SSH server to perform this check. If you are
running a RedHat host, make sure that the command :\nrpm -q openssh-server\n Returns :
openssh-server-3.1p1-6.
Solution: Upgrade to OpenSSH 3.4 or contact your vendor for a patch.
CVE-2002-0640
OpenSSH < 2.9.9 Multiple Key Type ACL Bypass
PVS ID: 1988 FAMILY: SSH
RISK:
MEDIUM
NESSUS ID:10771
Description: Synopsis :\n\nRemote users may be able to circumvent system policy.\n\nThe remote host
is running a version of OpenSSH between 2.5.x and 2.9.x. Depending on the order of the
user keys in ~/.ssh/authorized_keys2, sshd might fail to apply the source IP based access
control restriction to the correct key. This problem allows users to circumvent the system
policy and login from disallowed source IP address.
Solution: Upgrade to OpenSSH 2.9.9 or higher.
CVE-2001-1380
Passive Vulnerability Scanner (PVS) Signatures
OpenSSH < 3.2.1 AFS/Kerberos Ticket/Token Passing Overflow
Family Internet Services 507