Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-22456 | GEN005501 | SV-37820r1_rule | DCPP-1 | Medium |
Description |
---|
SSHv1 is not a DoD-approved protocol and has many well-known vulnerability exploits. Exploits of the SSH client could provide access to the system with the privileges of the user running the client. |
STIG | Date |
---|---|
Red Hat Enterprise Linux 5 Security Technical Implementation Guide | 2013-04-10 |
Check Text ( C-37022r1_chk ) |
---|
Check the SSH client configuration for allowed protocol versions. # grep -i protocol /etc/ssh/ssh_config | grep -v '^#' If the returned protocol configuration allows versions less than 2, this is a finding. |
Fix Text (F-32289r1_fix) |
---|
Edit the /etc/ssh/ssh_config file and add or edit a "Protocol" configuration line not allowing versions less than 2. |