Detections
Analytics
GEN005538 - The SSH daemon must not allow rhosts RSA authentication.
Information
If SSH permits rhosts RSA authentication, a user may be able to log in based on the keys of the host originating the request and not any user-specific authentication.Solution
Edit the SSH daemon configuration and add or edit the 'RhostsRSAAuthentication' setting value to 'no'.Restart the SSH daemon.
# /sbin/service sshd restart
See Also
http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip
Item Details
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCE|CCE-4370-3, CCI|CCI-000366, Group-ID|V-22487, Rule-ID|SV-37905r2_rule, STIG-ID|GEN005538, Vuln-ID|V-22487
Plugin: Unix
Control ID: 70a6387b63d63462b09a92f9f06eeaf684544f0b062eb97fa7fea3483d5b3e7e