Test Kennung:	1.3.6.1.4.1.25623.1.0.10268
Kategorie:	Gain a shell remotely
Titel:	SSH Insertion Attack
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: You are running a version of SSH which is older than (or as old as) version 1.2.23. This version is vulnerable to a known plain text attack, which may allow an attacker to insert encrypted packets in the client - server stream that will be deciphered by the server, thus allowing the attacker to execute arbitrary commands on the remote server Solution : Upgrade to version 1.2.25 of SSH which solves this problem. More information: http://www.core-sdi.com/english/ssh/ Risk factor : High
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-1999-1085 Bugtraq: 19980612 CORE-SDI-04: SSH insertion attack (Google Search) http://marc.info/?l=bugtraq&m=90221103125884&w=2 Bugtraq: 19980703 UPDATE: SSH insertion attack (Google Search) http://marc.info/?l=bugtraq&m=90221104525878&w=2 CERT/CC vulnerability note: VU#13877 http://www.kb.cert.org/vuls/id/13877 Cisco Security Advisory: 20010627 Multiple SSH Vulnerabilities http://www.iss.net/security_center/static/1126.php
Copyright	This script is Copyright (C) 1999 Renaud Deraison

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.