Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.150712
Category:SSL and TLS
Title:Weak (Small) Public Key Size(s) (SSH)
Summary:The remote SSH server uses a weak (too small) public key; size.
Description:Summary:
The remote SSH server uses a weak (too small) public key
size.

Vulnerability Insight:
- <= 1024 bit for RSA based keys:

Best practices require that RSA digital signatures be 2048 or more bits long to provide adequate
security. Key lengths of 1024 are considered deprecated since 2011.

Vulnerability Impact:
A man-in-the-middle attacker can exploit this vulnerability to
record the communication to decrypt the session key and even the messages.

Solution:
- <= 1024 bit for RSA based keys:

Install a RSA public key length of 2048 bits or greater, or to switch to more secure key types.

CVSS Score:
4.6

CVSS Vector:
AV:A/AC:H/Au:N/C:C/I:N/A:N

CopyrightCopyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.