LinuxQuestions.org - How to Patch SunSSH in Solaris 10

- Solaris / OpenSolaris (https://www.linuxquestions.org/questions/solaris-opensolaris-20/)

- - How to Patch SunSSH in Solaris 10 (https://www.linuxquestions.org/questions/solaris-opensolaris-20/how-to-patch-sunssh-in-solaris-10-a-4175412170/)

How to Patch SunSSH in Solaris 10

Hi All,

How can I patch or update the SunSSH? I am currently having issue with the Nessus scan. It showed that :

Code:

 

The version of SunSSH running on the remote host has an information

disclosure vulnerability.  A design flaw in the SSH specification

could allow a man-in-the-middle attacker to recover up to 32 bits of

plaintext from an SSH-protected connection in the standard

configuration.  An attacker could exploit this to gain access to

sensitive information.



Plugin Output : 

Version source    : SSH-2.0-Sun_SSH_1.1

  Installed version : 1.1

  Fixed version    : 1.1.1 / 1.3

I googled and found that I might need to use patchadd.

But when trying to download the patch from sunsolve dot sun dot com, I found that the link is already dead.

Any idea?

Thanks.

you need to have an account and also you (or your company) need to have some agreement

_____________________________________
If someone helps you, or you approve of what's posted, click the "Add to Reputation" button, on the left of the post.
Happy with solution ... mark as SOLVED
(located in the "thread tools")

Maybe have a look at this http://wesunsolve.net/.

Maybe they got sth for you