BTW, from any OpenSSH Client (POSIX Platform), you would just run "ssh -v -v [remote host]" to learn the version-string announced by the remote server. Take note that even if the numerical version appears to be vulnerable, there may be a Patch level indicated "p2" or "sr1" etc. appended to the version string, added by a redistributor. Then you need to know if the redistributing vendor (like Cisco) has backported a fix/patch from the OEM (OpenSSH/OpenBSD project) into to their codebase, or if there is an intermediary agency, like a GNU/Linux distribution (Debian, RedHat, etc.) that complicates the situation through their RPM process. A lot of false positives in the Nessus/Tenable world come from misunderstanding this.
