|
|
04-26-2012
Registered User
44,
0
RHEL 3 and OpenSSH question..
Hey Folks,
I currently have several RHEL 3 machines. All of them are running OpenSSH_3.6.1p2, SSH protocols 1.5/2.0
I have a vulnerability issue and need to update OpenSSH to the newest version supported by RHEL 3.
The question is:
What would that version would be?
This is actually the problem:
"OpenSSH is a set of computer programs that provides encrypted communication sessions over a computer network using the ssh protocol. OpenSSH includes Pluggable Authentication Module (PAM) which depends on text configuration files for security actions to be taken for an application. A remote administrator user account guessing vulnerability is present in OpenSSH editions. If PermitRootLogin is disabled, a remote attacker can guess the administrator password through a timing attack. A successful exploitation will allow the attacker to guess the root password."
Thanks!
I currently have several RHEL 3 machines. All of them are running OpenSSH_3.6.1p2, SSH protocols 1.5/2.0
I have a vulnerability issue and need to update OpenSSH to the newest version supported by RHEL 3.
The question is:
What would that version would be?
This is actually the problem:
"OpenSSH is a set of computer programs that provides encrypted communication sessions over a computer network using the ssh protocol. OpenSSH includes Pluggable Authentication Module (PAM) which depends on text configuration files for security actions to be taken for an application. A remote administrator user account guessing vulnerability is present in OpenSSH editions. If PermitRootLogin is disabled, a remote attacker can guess the administrator password through a timing attack. A successful exploitation will allow the attacker to guess the root password."
Thanks!
Last edited by 300zxmuro; 04-26-2012 at 03:24 PM..