How to Patch SunSSH in Solaris 10

romeo_tango · 06-18-2012, 11:56 PM

Hi All,

How can I patch or update the SunSSH? I am currently having issue with the Nessus scan. It showed that :

Code:

 
The version of SunSSH running on the remote host has an information
disclosure vulnerability.  A design flaw in the SSH specification
could allow a man-in-the-middle attacker to recover up to 32 bits of
plaintext from an SSH-protected connection in the standard
configuration.  An attacker could exploit this to gain access to
sensitive information.

Plugin Output : 
Version source    : SSH-2.0-Sun_SSH_1.1
  Installed version : 1.1
  Fixed version     : 1.1.1 / 1.3

I googled and found that I might need to use patchadd.

But when trying to download the patch from sunsolve dot sun dot com, I found that the link is already dead.

Any idea?

Thanks.

pan64 · 06-19-2012, 01:19 AM

you need to have an account and also you (or your company) need to have some agreement

_____________________________________
If someone helps you, or you approve of what's posted, click the "Add to Reputation" button, on the left of the post.
Happy with solution ... mark as SOLVED
(located in the "thread tools")

heinblöd · 06-19-2012, 02:35 AM

Maybe have a look at this http://wesunsolve.net/.

Maybe they got sth for you