Wednesday, September 9, 2015

SSH Server CBC Mode Ciphers Supported

Description:
The affected host support the use of Cipher Block Chaining (CBC) encryption which is associated to cryptography flaws.

Risk Level:
Low

Implication:
An attacker could leverage this issue to decipher the encrypted data to obtain sensitive information.

Recommendation:
The affected host should be configured to disable the CBC mode cipher encryption, and enable CTR or GCM cipher mode encryption.

Manual Verification:
nmap --script ssh2-enum-algos -p port ipaddr =>report the number of algorithms used (such as encryption, compression, etc)



No comments:

Post a Comment