Test ID:	1.3.6.1.4.1.25623.1.0.109795
Category:	Policy
Title:	Linux: MAC algorithms
Summary:	This variable limits the types of MAC algorithms that SSH can use during; communication. MD5 and 96-bit MAC algorithms are considered weak and have been shown to increase; exploitability in SSH downgrade attacks. Weak algorithms continue to have a great deal of; attention as a weak spot that can be exploited with expanded computing power. An attacker that; breaks the algorithm could take advantage of a MiTM position to decrypt the SSH tunnel and capture; credentials and information.;; Note: This check fails if any MAC algorithms are found that are not specified in the VT preferences.
Description:	Summary: This variable limits the types of MAC algorithms that SSH can use during communication. MD5 and 96-bit MAC algorithms are considered weak and have been shown to increase exploitability in SSH downgrade attacks. Weak algorithms continue to have a great deal of attention as a weak spot that can be exploited with expanded computing power. An attacker that breaks the algorithm could take advantage of a MiTM position to decrypt the SSH tunnel and capture credentials and information. Note: This check fails if any MAC algorithms are found that are not specified in the VT preferences. CVSS Score: 0.0 CVSS Vector: AV:L/AC:H/Au:S/C:N/I:N/A:N
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.