The SSH daemon must be configured to only use the SSHv2 protocol.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-4295	GEN005500	SV-4295r2_rule	DCPP-1	High

Description
SSHv1 is not a DoD-approved protocol and has many well-known vulnerability exploits. Exploits of the SSH daemon could provide immediate root access to the system.

STIG	Date
VMware ESX 3 Server	2016-05-13

Details

Check Text ( C-1875r2_chk )
Examine the sshd configuration file. cat /opt/ssh/etc/sshd_config | tr '\011' ' ' | tr -s ' ' | sed -e 's/^[ \t]*//' | grep -v '^#' | grep -i "Protocol" If Protocol 2,1 or Protocol 1 are defined on a line without a leading comment, this is a finding.

Fix Text (F-4206r2_fix)
Edit the configuration file and modify the Protocol line. Protocol 2 Restart sshd: /sbin/init.d/secsh stop /sbin/init.d/secsh start