topic Re: ssh version hide while telnet to gateway port 22 in Firewall and Security Management

ssh version hide while telnet to gateway port 22

Duminda_SAT — Fri, 14 Oct 2022 07:50:08 GMT

Hi,

when i telnet to gateway port 22 that will shows our openssl version details how to change this or how to hide this?

i have tried to edit /sbin/ssh file. but its cannot edit its non readerble format

Kindly advice.

Thank you.

Re: ssh version hide while telnet to gateway port 22

Chris_Atkinson — Fri, 14 Oct 2022 09:11:44 GMT

Openssl or Openssh?

I don't think this is possible per the RFC that pertains to SSH which states this info MUST be included from memory.

Our implementation is a hardened version, the numeric value in this case is not necessarily representative of the patch level and as such is masked.

Re: ssh version hide while telnet to gateway port 22

Duminda_SAT — Mon, 17 Oct 2022 02:54:28 GMT

Hi Chris, thank you so much for the update.

can we upgrade the OpenSSH version because we had scanning using Nessus it's showing below high CVE for OpenSSH. one of our gateway running with R80.30 Take 254. we have planned to upgrade next month. until now we need to fix this openssh issue. kindly advice.

CVE-2016-20012,
CVE-2020-15778,
CVE-2021-36368

Thank you,

Duminda

Re: ssh version hide while telnet to gateway port 22

Chris_Atkinson — Mon, 17 Oct 2022 03:22:10 GMT

As indicated above solely the version reported is not representative of exposure to a given CVE.

Moreover note the "Disputed" status of each of those CVEs...

Refer also:
sk65269: Status of OpenSSH CVEs
sk100647: Check Point response to common false positives scanning results