Nagios is using deprecated SSH cryptographic settings

[Nuggel1234]

Hello,

we have a vulnerability:

Vulnerability ID: q038739

The SSH protocol (Secure Shell) is a method for secure remote login from one computer to another.

The target is using deprecated SSH cryptographic settings to communicate.

Consequences:
A man-in-the-middle attacker may be able to exploit this vulnerability to record the communication to decrypt the session key and even the messages.

...............
Is there a posibility to:
a) deactivate ssh from the nagios server
b) allow only few ips access to ssh (without firewall...)
c) make it safe?

Thank you

[cdienger]

You can deactive sshd on a cent/rhel 7/deb/ubuntu machine with:

Code: Select all

systemctl disable sshd
systemctl stop sshd

You can also increase the security by specifying strong ciphers and macs:

https://www.golinuxhub.com/2018/03/best ... y-ciphers/

Limiting access to specific IPs is also possible:

https://unix.stackexchange.com/question ... ip-address

[Nuggel1234]

ok thank you problem solved

[scottwilkerson]

ok thank you problem solved

Great!

Closing thread