The host is installed with OpenSSH and is prone to information disclosure vulnerability.

Successful exploits will allow attackers to obtain four bytes of plaintext from an encrypted session. Impact Level: Application

Upgrade to higher version http://www.openssh.com/portable.html

The flaw is due to the improper handling of errors within an SSH session encrypted with a block cipher algorithm in the Cipher-Block Chaining 'CBC' mode.

- SSH Communications Security Tectia Client and Server version 6.0.4 and prior - SSH Communications Security Tectia ConnectSecure version 6.0.4 and prior - OpenSSH OpenSSH version 4.7p1 and prior

• http://secunia.com/advisories/32760/
• http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt

---

Updated on 2015-03-25