Test ID:	1.3.6.1.4.1.25623.1.0.106447
Category:	CISCO
Title:	Cisco IOS Software SSH X.509 Authentication Bypass Vulnerability
Summary:	A vulnerability in the implementation of X.509 Version 3 for SSH;authentication functionality in Cisco IOS Software could allow an unauthenticated, remote attacker to bypass;authentication on an affected system.
Description:	Summary: A vulnerability in the implementation of X.509 Version 3 for SSH authentication functionality in Cisco IOS Software could allow an unauthenticated, remote attacker to bypass authentication on an affected system. Vulnerability Insight: The vulnerability is due to improper validation of X.509 signatures during the SSH authentication phase. An attacker could exploit this vulnerability by presenting an invalid X.509 signature to an affected system. Vulnerability Impact: A successful exploit could allow the attacker to impersonate an existing valid user over an SSH connection. Solution: See the referenced vendor advisory for a solution. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6474 BugTraq ID: 94773 http://www.securityfocus.com/bid/94773 http://www.securitytracker.com/id/1037420
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.