Hello, we scan a switch with Qualys for vulnerability and found some issue as below. Anyone can tell what it does mean and provide some suggestion to fix it? Thank you
"OpenSSH is a set of computer programs providing encrypted communication sessions over a computer network using the SSH protocol.
The following security vulnerabilities have been identified in OpenSSH:
- A signal handler race condition in OpenSSH before Version 4.4 can be exploited to cause a crash, and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free. (CVE-2006-5051)
- A denial of service vulnerability exists in sshd in OpenSSH before Version 4.4, when using the SSH protocol Version 1, because it does not properly handle duplicate incoming blocks. This can be exploited by a remote attacker to cause sshd to consume a large quantity of CPU resources. (CVE-2006-4924)" If this vulnerability is successfully exploited, it can crash the OpenSSH server and potentially allow execution of arbitrary code. "Upgrade to OpenSSH 4.4 or later, available from the OpenSSH Web site http://www.openssh.org/ (http://www.openssh.org/).
