Secure Shell (SSH)

Test Name

Synopsis

Eth-Sec-SSH-001

Verify ssh v1 is not supported

Eth-Sec-SSH-002

Verify the SSH Server Not Support Local Port Forwarding

Eth-Sec-SSH-003

Verify the Backdoors Using Widely Known Credentials

Eth-Sec-SSH-004

Verify the Weak Cipher Suites and Key Exchange Algorithms in sshd Configuration

Eth-Sec-SSH-005

Verify the CLI not leak sensitive information via environment variable

Eth-Sec-SSH-006

Verify the CLI not able to execute OS command injection

Eth-Sec-SSH-007

Verify OS command injection via SSH user name

Eth-Sec-SSH-008

Verify OS command injection via SSH password

Eth-Sec-SSH-009

Verify SSH lockout mechanism

Eth-Sec-SSH-010

Verify SSH only allow one session