ID de Prueba:	1.3.6.1.4.1.25623.1.0.105611
Categoría:	SSL and TLS
Título:	Weak Encryption Algorithm(s) Supported (SSH)
Resumen:	The remote SSH server is configured to allow / support weak; encryption algorithm(s).
Descripción:	Summary: The remote SSH server is configured to allow / support weak encryption algorithm(s). Vulnerability Insight: - The 'arcfour' cipher is the Arcfour stream cipher with 128-bit keys. The Arcfour cipher is believed to be compatible with the RC4 cipher [SCHNEIER]. Arcfour (and RC4) has problems with weak keys, and should not be used anymore. - The 'none' algorithm specifies that no encryption is to be done. Note that this method provides no confidentiality protection, and it is NOT RECOMMENDED to use it. - A vulnerability exists in SSH messages that employ CBC mode that may allow an attacker to recover plaintext from a block of ciphertext. Solution: Disable the reported weak encryption algorithm(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.