AIX OpenSSH Vulnerability : openssh_advisory5.asc
Medium Nessus Plugin ID 85930
Synopsis
The remote AIX host has a vulnerable version of OpenSSH.
Description
The version of OpenSSH running on the remote host is affected by a security bypass vulnerability due to a failure to check the refusal deadline during the forwarding of untrusted X11 connections. A remote attacker can exploit this to bypass timeout checks and XSECURITY restrictions.
Solution
A fix is available and can be downloaded from the AIX website.
To extract the fixes from the tar file :
zcat OpenSSH_6.0.0.6110.tar.Z | tar xvf - (or) zcat OpenSSH_6.0.0.6201.tar.Z | tar xvf -
IMPORTANT : If possible, it is recommended that an mksysb backup of the system be created. Verify it is both bootable and readable before proceeding.
To preview the fix installation :
installp -apYd . OpenSSH_6.0.0.6110 (or) installp -apYd . OpenSSH_6.0.0.6201
To install the fix package:
installp -aXYd . OpenSSH_6.0.0.6110 (or) installp -aXYd . OpenSSH_6.0.0.6201