The workaround of the bug is :
Workaround: There are mitigations to this vulnerability:
For Cisco IOS, the SSH server can be disabled by applying the command crypto key
zeroize rsa while in configuration mode. The SSH server is enabled automatically upon
generating an RSA key pair. Zeroing the RSA keys is the only way to completely disable the SSH server.
Access to the SSH server on Cisco IOS may also be disabled via removing SSH as a valid transport
protocol. This can be done by reapplying the transport input command
with 'ssh' removed from the list of permitted transports on VTY lines while in configuration mode. For
example:
line vty 0 4
transport input telnet
end
If SSH server functionality is desired, access to the server can be restricted to specific source IP
addresses or blocked entirely using Access Control Lists (ACLs) on the VTY lines as shown in the
following URL:
http://www.cisco.com/en/US/docs/switches/lan/catalyst2950/software/release/12.1_9_ea1/configur
ation/guide/swacl.html#xtocid14
More information on configuring ACLs can be found on the Cisco public website:
http://www.cisco.com/warp/public/707/confaccesslists.html
