CVE-2015-3420

The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service login process crash via vectors related to handshake failures...

CVE-2015-3420

The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service login process crash via vectors related to handshake failures...

CVE-2015-3420

The vulnerability CVE-2015-3420 affects Dovecot before 2.2.17: the ssl-proxy-openssl.c function, when SSLv3 is disabled, can be exploited via handshake failure vectors to cause a denial of service (login process crash). Exploit details, affected versions beyond 2.2.17, and a remediation patch are...

CVE-2015-3420

The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service login process crash via vectors related to handshake failures...

Bitvise: The POODLE attack (SSLv3 supported)

Hi Bitvise security Team The url https://massmail.bitvise.com/ is vulnerable to ssl poodle attack. Websites that support SSLv3 and CBC-mode ciphers are potentially vulnerable to an active MITM Man-in-the-middle attack. This attack, called POODLE, is similar to the BEAST attack and also allows a...

Fedora 25 : globus-ftp-client / globus-gass-cache-program / globus-gass-copy / etc (2017-7591a8e2c9)

globus-ftp-client - Adapt to Perl 5.26 - POSIX::tmpnam no longer available - Remove some redundant tests to reduce test time globus-gass-cache-program - GT6 update globus-gass-copy - Don't attempt sshftp data protection without creds 9.24 - Checksum verification based on contribution from IBM 9.2...

Fedora 24 : globus-ftp-client / globus-gass-cache-program / globus-gass-copy / etc (2017-5f8ebbd2b1)

globus-ftp-client - Adapt to Perl 5.26 - POSIX::tmpnam no longer available - Remove some redundant tests to reduce test time globus-gass-cache-program - GT6 update globus-gass-copy - Don't attempt sshftp data protection without creds 9.24 - Checksum verification based on contribution from IBM 9.2...

SSLv3 Detection

Binary data 700104.prm...

openSUSE Security Update : libressl (openSUSE-2017-561)

This update for libressl to version 2.5.1 fixes the following issues : These security issues were fixed : - CVE-2016-0702: Prevent side channel attack on modular exponentiation boo968050. - CVE-2016-7056: Avoid a side-channel cache-timing attack that can leak the ECDSA private keys when signing...

Poodle SSLv3 Vulnerability

github.com/jaytaylor/shipbuilder is vulnerable to the poodle SSLv3 vulnerability. It does not disable the use of SSL 3.0 by using proper setting in haproxy configuration...

openSUSE Security Update : slrn (openSUSE-2017-459) (POODLE)

This update for slrn contains one security improvement : - CVE-2014-3566: Disable SSLv3 to prevent POODLE attack boo1031023 The version 1.0.3 also contains a number of display and message processing improvements. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

FormAssembly: SSLv3 Poodle Vulnerability

Hey there, I tested against POODLE MITM and enterprisedemo.formassembly.com is vulnerable, I simply went into terminal and used this command "openssl sclient -connect enterprisedemo.formassembly.com:443 -ssl3" POC How to fix: Disable SSLv3...

Insecure Defaults

Glassfish is found to be using insecure defaults. Glassfish supports SSLv3 by default, it has been proven to be insecure and was officially deprecated by the IETF in June 2015...

Debian DLA-881-1 : ejabberd security update

It was found that ejabberd does not enforce the starttlsrequired setting when compression is used, which causes clients to establish connections without encryption. For Debian 7 'Wheezy', this problem has been fixed in version 2.1.10-4+deb7u2. This update also disables the insecure SSLv3. We...

[SECURITY] [DLA 881-1] ejabberd security update

Package : ejabberd Version : 2.1.10-4+deb7u2 CVE ID : CVE-2014-8760 Debian Bug : 767521 767535 It was found that ejabberd does not enforce the starttlsrequired setting when compression is used, which causes clients to establish connections without encryption. For Debian 7 "Wheezy", this problem h...

Code injection

Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when configured to use SSL/TLS, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 aka POODLE...

CVE-2015-4078

Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when configured to use SSL/TLS, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 aka POODLE...

CVE-2015-4078

Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when configured to use SSL/TLS, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 aka POODLE...

CVE-2015-4078

CVE-2015-4078 maps to the POODLE-like issue where SSLv3 is supported by Cloudera Navigator 2.2.x (pre-2.2.4) and 2.3.x (pre-2.3.3), enabling a padding-oracle attack to obtain plaintext data. Public references in the connected docs describe SSLv3/POODLE vulnerability details and remediation patter...

Rockstar Games: SSLv3 POODLE Vulnerability

Tested against POODLE MITM and www.rockstargames.com is vulnerable, i simply went into terminal and used this command "openssl sclient -connect www.rockstargames.com:443 -ssl3" proof attached in image below How to fix: Disable SSLv3...