DeutschShown in its original language — a full translation is planned for a future version.
SSL 3.0: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
view advisory published 2014-10-14
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in SSL 3.0 ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-3566US | low3.4OT high | Exploit | ||
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain clear… | ||||
02
references
External citations — patches, advisories, analysis.
- IBM SECURITY ADVISORY vom 2014-10-29external
- Eintrag in Blackberry Knowledge Base: Article ID: KB36397external
- CVE-2014-3566 vom 2014-10-20external
- NetBSD Security Advisory 2014-015 vom 2014-11-06external
- Google Online Security Blog "This POODLE bites: exploiting the SSL 3.0 fallback" vom 2014-10-14external
- Juniper Security Bulletin vom 2014-10-15external
- Juniper Security Bulletin JSA10656 vom 2014-10-16external
- Oracle Linux Security Advisory ELSA-2019-4581 vom 2019-03-13external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan