Sun StorageTek SL8500 Modular Library System
 

PLA-Support>Sun Systems>TAPE>Tape Hardware>SN-TP: SL3000-8500 Library
 

In this Document

Symptoms

Changes

Cause

Solution

References

Created from <SR 3-8456668471>

Applies to:

Symptoms

 A PCI Scan Showes OpenSSH Vulnerabilities On SL8500.

Changes

 A network security scan run on a user's network.

Cause

 OpenSSH security vulnerabilities can occur as new releases of OpenSSH levels are generated by the OpenSSH community.

To view past and present versions of OpenSSh go to this website http://www.openssh.com/security.html

Solution

Two pieces of information should be known before proceeding with the solution.

1. What is the minimum version of OpenSSH does the security software running on a users network expect to find and not generate vulnerability messages or warnings.

2. The current version of OpenSSH running on a device flagged by the security software.

To discover what version of OpenSSH is running on any device in the network - Issue the following command from a unix server to the tape library ip address:

#ssh -V <ip-address>

sample output

     OpenSSH_5.8p2, OpenSSL 0.9.6e 30 Jul 2002

If the version reported by the library from the ssh command is not at the minimum level the security software is expecting, user should schedule an upgrade of library microcode to resolve this issue.

Starting with SL8500 microcode version 8.05.  The OpenSSH version is 5.8p2.
OpenSSL version 0.9.6e

For a list of OpenSSH version levels visit this website http://www.openssh.com/security.html

SL8500 microcode version 7.05 supports OpenSSH 4.2. 

References

This solution has no attachment