topic Re: Disable SSH1 support in Operating System - HP-UX

Disable SSH1 support

M.Thomas — Thu, 28 Sep 2006 14:21:09 GMT

another ssh security stuff..
SSH Protocol Version 1 Supported on HP-UX servers.

How to Disable SSH1 support?

Note: Do not enable SSH Version 1 Fallback since systems with upgraded versions of SSH and with Fallback Version 1 enabled are still vulnerable.

Thanks

Thomas

Re: Disable SSH1 support

Ivan Krastev — Thu, 28 Sep 2006 14:24:48 GMT

Use : Protocol 2
in sshd_config

Re: Disable SSH1 support

Arunvijai_4 — Thu, 28 Sep 2006 14:57:52 GMT

Hi Thomas,

When you upgrade to latest Secureshell, /opt/ssh/etc/sshd_config will be overwritten. latest version uses Protocol 2 by default.

-Arun

Re: Disable SSH1 support

Steven E. Protter — Thu, 28 Sep 2006 15:01:08 GMT

Shalom Thomas,

Of course you can fix this forever in the sshd_config file.

If you do you may generate complaints from users that use older ssh1 protocol. I think thats a good thing because that protocol is not secure. Seems like you agree and should go foward.

The configuration file is open source and understandable. I would not trust the last upgrade to fix the file, eyeball it.

SEP

Re: Disable SSH1 support

Haralambos — Thu, 28 Sep 2006 22:08:54 GMT

I am also wondering can this vulnerability be mitigated using tcp-wrappers?

Very few of my ssh servers have to have v1 enabled.

regards.