Bitvise SSH Server < 7.41 Multiple Vulnerabilities (remote)

medium Nessus Plugin ID 110291

Synopsis

The SSH server running on the remote host is affected by multiple vulnerabilities.

Description

According to its banner, the version of Bitvise SSH Server running on the remote host is prior to 7.41. It is, therefore, affected by multiple vulnerabilities.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Upgrade to Bitvise SSH Server 7.41 or later.

See Also

http://www.nessus.org/u?6bf2994b

Plugin Details

Severity: Medium

ID: 110291

File Name: bitvise_ssh_server_remote_7_41.nasl

Version: 1.2

Type: remote

Family: Misc.

Published: 6/1/2018

Updated: 6/3/2021

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS v3

Risk Factor: Medium

Base Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vulnerability Information

CPE: cpe:/a:bitvise:ssh_server

Patch Publication Date: 5/18/2018

Vulnerability Publication Date: 5/18/2018

Reference Information

IAVB: 2018-B-0068-S