Kategori: Remediation Guides
Unencrypted Telnet Server: How to Disable Telnet and Use SSH
Unencrypted Telnet Server is a Nessus and Greenbone/OpenVAS finding that means a host accepts Telnet logins, so usernames, passwords and commands cross…
SSLv3 POODLE Vulnerability Fix: Disable SSL 2.0 and 3.0 (Nessus 20007, 78479)
SSL Version 2 and 3 Protocol Detection means a service on the host still completes handshakes using SSL 2.0 or SSL 3.0,…
SSL Anonymous Cipher Suites Supported (Nessus 31705): How to Fix It
SSL Anonymous Cipher Suites Supported (Nessus plugin 31705) means a TLS service accepts cipher suites that skip server authentication, such as the…
SSH Weak MAC Algorithms Enabled: How to Disable MD5, 96-bit and SHA-1 MACs in sshd
SSH Weak MAC Algorithms Enabled means your SSH server still offers MACs that scanners treat as weak: MD5, 96-bit truncated MACs and,…
SSH Weak Key Exchange Algorithms Enabled: How to Fix It (Nessus 153953 and Logjam 86328)
The SSH weak key exchange algorithms enabled finding means your SSH server still offers SHA-1 or 1024-bit Diffie-Hellman key exchange methods, such…
How to Disable SSH Root Login (CIS: Ensure SSH Root Login Is Disabled)
“Ensure SSH root login is disabled” is a CIS benchmark check that fails when the SSH daemon still lets the root account…
SSH Protocol Version 1 Session Key Retrieval: How to Disable SSHv1
SSH Protocol Version 1 Session Key Retrieval (Nessus plugin 10882) means an SSH server still accepts the obsolete SSHv1 protocol, whose cryptographic…
How to Disable SSH Password Authentication (Nessus 149334: SSH Password Authentication Accepted)
SSH Password Authentication Accepted means the SSH server still lets users log in with a password, which exposes it to password guessing…
SSH Server CBC Mode Ciphers Enabled: How to Disable CBC and Arcfour Ciphers on Linux
SSH Server CBC Mode Ciphers Enabled means your SSH daemon still offers cipher block chaining ciphers such as aes128-cbc or 3des-cbc, and…
How to Fix SQL Server Browser UDP 1434 Exposure (Nessus 10674)
Microsoft SQL Server UDP Query Remote Version Disclosure (Nessus plugin 10674) means the SQL Server Browser service answers unauthenticated queries on UDP…