(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote host is running a version of OpenSSH that is older than
3.0.2. Versions prior than 3.0.2 are vulnerable to an environment variables export that can
allow a local user to execute command with root privileges. This problem affects only
versions prior than 3.0.2 when the UseLogin feature is enabled (usually disabled by
default).
Solution: Upgrade to OpenSSH 3.0.2 or higher.
CVE-2001-0872
Dropbear SSH Server Format String
PVS ID: 1993 FAMILY: SSH RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a 'format string' flaw\n\nThe remote host is
running a version of the Dropbear SSH server that is vulnerable to a format string attack.
An attacker may use this vulnerability to execute arbitrary code on the SSH server.
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
OpenSSH < 3.7 buffer_append_space Function Overflow
PVS ID: 1994 FAMILY: SSH RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an flaw that allows attackers to execute
arbitrary commands.\n\nThe remote host is running a version of OpenSSH that is
vulnerable to a flaw in the buffer handling functions which may possibly leading to
command execution.
Solution: Upgrade to OpenSSH 3.7 or higher.
CVE-2003-0695
LSH < 1.5 lshd Daemon Remote Overflow
PVS ID: 1995 FAMILY: SSH RISK: HIGH NESSUS ID:11843
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of LSH that is vulnerable to a buffer overflow that allows an attacker to
gain a shell on this host.
Solution: Upgrade to LSH 1.5 or higher.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Portable OpenSSH < 3.7.1p2 Multiple PAM Vulnerabilities
PVS ID: 1996 FAMILY: SSH RISK: HIGH NESSUS ID:11848
Family Internet Services 509