IETF-SSH archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

SSH2 - alert I need help with...




Vulnerability : SSH2 Algorithm Negotiation Enumeration
Additional description :    SSH Server Key Exchange Init Enumeration Key Exchange diffie-hellman-group-exchange-sha256 diffie-hellman-group-exchange-sha1 diffie-hellman-group14-sha1 diffie-hellman-group1-sha1 Server Host Key ssh-rsa ssh-dss Client to Server Encryption aes128-cbc 3des-cbc blowfish-cbc cast128-cbc arcfour128 arcfour256 arcfour aes192-cbc aes256-cbc rijndael-cbc%lysator.liu.se@localhost aes128-ctr aes192-ctr aes256-ctr Server to Client Encryption aes128-cbc 3des-cbc blowfish-cbc cast128-cbc arcfour128 arcfour256 arcfour aes192-cbc aes256-cbc rijndael-cbc%lysator.liu.se@localhost aes128-ctr aes192-ctr aes256-ctr Client to Server MAC hmac-md5 hmac-sha1 hmac-ripemd160 hmac-ripemd160%openssh.com@localhost hmac-sha1-96 hmac-md5-96 Server t



I received this alert some time ago. I have not been able to figure out how to get our scans to clear this alert.  I have been told to verify or eliminate all weak encryptions. I can not figure out how to accomplish this. Can anyone offer a suggestion or explain to me what I need to do. I am not that familiar with ssh encryption, just basic concepts. I am running OpenSSH_4.6p1, OpenSSL 0.9.8e 23 Feb 2007. I thought upgrading to latest version would resolve the problem, but nooooooo.


Help! Going nuts. Throw a lifesaver! Going dowwn....



Rich


 genail%us.ibm.com@localhost


Home | Main Index | Thread Index | Old Index