ID de Prueba:	1.3.6.1.4.1.25623.1.0.10268
Categoría:	Gain a shell remotely
Título:	SSH Insertion Attack
Resumen:	NOSUMMARY
Descripción:	Description: You are running a version of SSH which is older than (or as old as) version 1.2.23. This version is vulnerable to a known plain text attack, which may allow an attacker to insert encrypted packets in the client - server stream that will be deciphered by the server, thus allowing the attacker to execute arbitrary commands on the remote server Solution : Upgrade to version 1.2.25 of SSH which solves this problem. More information: http://www.core-sdi.com/english/ssh/ Risk factor : High
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-1999-1085 Bugtraq: 19980612 CORE-SDI-04: SSH insertion attack (Google Search) http://marc.info/?l=bugtraq&m=90221103125884&w=2 Bugtraq: 19980703 UPDATE: SSH insertion attack (Google Search) http://marc.info/?l=bugtraq&m=90221104525878&w=2 CERT/CC vulnerability note: VU#13877 http://www.kb.cert.org/vuls/id/13877 Cisco Security Advisory: 20010627 Multiple SSH Vulnerabilities http://www.iss.net/security_center/static/1126.php
Copyright	This script is Copyright (C) 1999 Renaud Deraison

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.