Detections
Analytics

GEN005500 - The SSH daemon must be configured to only use the SSHv2 protocol.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

SSHv1 is not a DoD-approved protocol and has many well-known vulnerability exploits. Exploits of the SSH daemon could provide immediate root access to the system.

Solution

Edit the configuration file and modify the Protocol line to look like:

Protocol 2

Reload sshd:
kill -HUP <PID of sshd>

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R1_STIG.zip

Item Details

References: CAT|I, CCI|CCI-001941, Rule-ID|SV-220108r505926_rule, STIG-ID|GEN005500, STIG-Legacy|SV-39817, STIG-Legacy|V-4295, Vuln-ID|V-220108

Plugin: Unix

Control ID: a84ef05a43951a3231c023b65b8f292451ef6763be328c5370e9d5b68edd071c