Detections
Analytics
UBTU-16-030350 - The SSH daemon must not allow compression or must only allow compression after successful authentication.
Information
If compression is allowed in an SSH connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection, potentially with root privileges.Solution
Configure SSH to use compression. Uncomment the 'Compression' keyword in '/etc/ssh/sshd_config' on the system and set the value to 'delayed' or 'no':Compression no
The SSH daemon must be restarted for the changes to take effect. To restart the SSH daemon, run the following command:
# sudo systemctl restart sshd.service
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_16-04_LTS_V2R3_STIG.zip
Item Details
Audit Name: DISA STIG Ubuntu 16.04 LTS v2r3
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215136r610931_rule, STIG-ID|UBTU-16-030350, STIG-Legacy|SV-90531, STIG-Legacy|V-75851, Vuln-ID|V-215136
Plugin: Unix
Control ID: 82f68ed4558a17692d862ea7b3a7c41c82756b02685138d21106fcf6a25808bf