Vulnerability Scanning Solutions, LLC.
Our Process
What We Scan For
Sample Report
Client List
Contact Us
What We Scan For
Family: Ubuntu Local Security Checks --> Category: infos

USN209-1 : openssh vulnerability Vulnerability Scan

Vulnerability Scan Summary
openssh vulnerability

Detailed Explanation for this Vulnerability Test

Synopsis :

These remote packages are missing security patches :
- openssh-client
- openssh-server
- ssh
- ssh-askpass-gnome

Description :

An information disclosure vulnerability has been found in the SSH
server. When the GSSAPIAuthentication option was enabled, the SSH
server could send GSSAPI credentials even to users who attempted to
log in with a method other than GSSAPI. This could inadvertently
expose these credentials to an untrusted user.

Please note that this does not affect the default configuration of the
SSH server.

Solution :

Upgrade to :
- openssh-client-3.9p1-1ubuntu2.1 (Ubuntu 5.04)
- openssh-server-3.9p1-1ubuntu2.1 (Ubuntu 5.04)
- ssh-3.9p1-1ubuntu2.1 (Ubuntu 5.04)
- ssh-askpass-gnome-3.9p1-1ubuntu2.1 (Ubuntu 5.04)

Threat Level: High

Click HERE for more information and discussions on this network vulnerability scan.


P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.