I've been trying to make my system more secure and have found some vulnerabilities with rkhunter.
- OpenSSL 0.9.7a [ Vulnerable ]
- Procmail MTA 3.22 [ OK ]
- OpenSSH 3.6.1p2 [ Vulnerable ]
* Check: SSH
Searching for sshd_config...
Checking for allowed root login... Watch out Root login possible. Possible risk!
Hint: see logfile for more information
Hint: See logfile for more information about this issue
Checking for allowed protocols... [ Warning (SSH v1 allowed) ]
I guess the simple question is; how do I make these applications less vulnerable?
Any help would be greatly appreciated