Test ID:	1.3.6.1.4.1.25623.1.0.11340
Category:	Gain a shell remotely
Title:	SSH Secure-RPC Weak Encrypted Authentication
Summary:	You are running SSH Communications Security SSH 1.2.27 - 1.2.30.
Description:	Summary: You are running SSH Communications Security SSH 1.2.27 - 1.2.30. Vulnerability Insight: With Secure-RPC, this version can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key file. Solution: Patch and new version are available from SSH. CVSS Score: 3.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2001-0259 BugTraq ID: 2222 http://www.securityfocus.com/bid/2222 Bugtraq: 20010116 Bug in SSH1 secure-RPC support can expose users' private keys (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-01/0262.html XForce ISS Database: ssh-rpc-private-key(5963) https://exchange.xforce.ibmcloud.com/vulnerabilities/5963
Copyright	Copyright (C) 2003 Xue Yong Zhi

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.