The SSH daemon must be configured to only use the SSHv2 protocol.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-4295	GEN005500	SV-40862r1_rule	ECSC-1 DCPP-1	High

Description
SSHv1 is not a DoD-approved protocol and has many well-known vulnerability exploits. Exploits of the SSH daemon could provide immediate root access to the system.

STIG	Date
AIX 5.3 SECURITY TECHNICAL IMPLEMENTATION GUIDE	2014-10-03

Details

Check Text ( C-39554r2_chk )
Examine the sshd configuration file. # grep -i Protocol /etc/ssh/sshd_config If Protocol 2,1 or Protocol 1 are defined on a line without a leading comment, this is a finding.

Fix Text (F-4206r2_fix)
Edit the configuration file and modify the Protocol line. Protocol 2 Restart sshd: /sbin/init.d/secsh stop /sbin/init.d/secsh start