Test ID:	1.3.6.1.4.1.25623.1.0.10268
Category:	Gain a shell remotely
Title:	SSH Insertion Attack
Summary:	NOSUMMARY
Description:	Description: You are running a version of SSH which is older than (or as old as) version 1.2.23. This version is vulnerable to a known plain text attack, which may allow an attacker to insert encrypted packets in the client - server stream that will be deciphered by the server, thus allowing the attacker to execute arbitrary commands on the remote server Solution : Upgrade to version 1.2.25 of SSH which solves this problem. More information: http://www.core-sdi.com/english/ssh/ Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-1999-1085 Bugtraq: 19980612 CORE-SDI-04: SSH insertion attack (Google Search) http://marc.info/?l=bugtraq&m=90221103125884&w=2 Bugtraq: 19980703 UPDATE: SSH insertion attack (Google Search) http://marc.info/?l=bugtraq&m=90221104525878&w=2 CERT/CC vulnerability note: VU#13877 http://www.kb.cert.org/vuls/id/13877 Cisco Security Advisory: 20010627 Multiple SSH Vulnerabilities http://www.iss.net/security_center/static/1126.php
Copyright	This script is Copyright (C) 1999 Renaud Deraison

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.