The host is installed with OpenSSH and is prone to information disclosure vulnerability.

Successful exploits will allow attackers to obtain four bytes of plaintext from an encrypted session. Impact Level: Application

Upgrade to higher version http://www.openssh.com/portable.html

The flaw is due to the improper handling of errors within an SSH session encrypted with a block cipher algorithm in the Cipher-Block Chaining 'CBC' mode.

Versions prior to OpenSSH 5.2 are vulnerable. Various versions of SSH Tectia are also affected.

• http://www.securityfocus.com/bid/32319

---

Updated on 2015-03-25