Test ID:	1.3.6.1.4.1.25623.1.0.10708
Category:	Gain a shell remotely
Title:	SSH 3.0.0
Summary:	NOSUMMARY
Description:	Description: You are running SSH 3.0.0. There is a bug in this release which allows any user to log into accounts whose password entry is two chars long or less. An attacker may gain root privileges using this flaw Solution : Upgrade to version 3.0.1 of SSH which solves this problem. Risk factor : High
Cross-Ref:	BugTraq ID: 3078 Common Vulnerability Exposure (CVE) ID: CVE-2001-0553 http://www.securityfocus.com/bid/3078 Bugtraq: 20010720 URGENT SECURITY ADVISORY FOR SSH SECURE SHELL 3.0.0 (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-07/0486.html CERT/CC vulnerability note: VU#737451 http://www.kb.cert.org/vuls/id/737451 Computer Incident Advisory Center Bulletin: L-121 http://www.ciac.org/ciac/bulletins/l-121.shtml http://www.osvdb.org/586 XForce ISS Database: ssh-password-length-unauth-access(6868) https://exchange.xforce.ibmcloud.com/vulnerabilities/6868
Copyright	This script is Copyright (C) 2001 Renaud Deraison

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.