OpenSSH Ciphersuite Specification Information Disclosure Weakness

  1. Network Vulnerabilities
  2. General
  3. OpenSSH Ciphersuite Specification Information Disclosure Weakness
Summary
OpenSSH is prone to a security weakness that may allow attackers to downgrade the ciphersuite. Successfully exploiting this issue in conjunction with other latent vulnerabilities may allow attackers to gain access to sensitive information that may aid in further attacks. Releases prior to OpenSSH 2.9p2 are vulnerable.
Solution
Updates are available. Please see the references for more information.
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities