(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote host is portable OpenSSH 3.7p1 or 3.7.1p1.\nVersions older
than 3.7.1p2 are vulnerable to a flaws that handle PAM authentication and may allow an
attacker to gain a shell on this host. For your information, the version of OpenSSH is: \n
%L
Solution: Upgrade to OpenSSH 3.7.1p2 or higher or disable PAM support in sshd_config.
OpenSSH Detection
CVE-2003-0786
PVS ID: 1997 FAMILY: SSH RISK: LOW NESSUS ID:Not Available
Description: The remote host is running an OpenSSH server.
Solution: N/A
CVE Not available
PuTTY < 0.55 modpow Function Arbitrary Code Execution
PVS ID: 1998 FAMILY: SSH
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
using a vulnerable version of PuTTY or of a PuTTY-based software (eg. PSCP or
WinSCP). PuTTY is a SSH client built for Linux and UNIX variants as well as Microsoft
Windows operating systems. Reportedly PuTTY is affected by a remote, pre-authentication
memory corruption vulnerability and by a buffer overrun in its SCP client. The version of
PuTTY installed on the remote client is: %L
Solution: Upgrade to PuTTY 0.55 or higher.
CVE-2004-1440
Putty < 0.54 SSH2 Authentication Password Persistence Weakness
PVS ID: 1999 FAMILY: SSH RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\nThe remote host is using a vulnerable version of PuTTY, a SSH
client built for Linux and UNIX variants as well as Microsoft Windows operation systems.
It has been reported that PuTTY does not safely handle password information. As a result, a
local user may be able to recover authentication passwords. The version of PuTTY installed
on the remote host is: %L
Solution: Upgrade to PuTTY 0.54 or higher.
CVE-2003-0048
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 510