Questions tagged [poodle]
a security vulnerability in SSLv3 (CVE-2014-3566) that could allow attacks by a process referred to as "padding oracle on downgraded legacy encryption"
6
questions
1
vote
2
answers
5k
views
Implementing TLS 1.2 when I SSH into a box as a measure against POODLE
Is it possible to edit sshd_config or ssh_config, such that the SSH connection into a machine configured to use TLS1.2 is successful and rejects connections configured to use TLS1.1 and below, as well ...
- 13
2
votes
2
answers
8k
views
How to disable SSLv2 and SSLv3 in pure-ftpd
I am running pure-ftpd like this:
/usr/sbin/pure-ftpd -A -c10 -B -C3 -z -D -e -fftp -H -I15 -lpam -L2000:8 -m4 -p30000:30100 -s -u40 -x -r -i -k99 -G -Z -Y1 -J'HIGH:MEDIUM:+TLSv1:!SSLv2:!SSLv3'
but ...
- 2,232
1
vote
2
answers
607
views
Still vulnerable after disabling SSLv3
I'm trying to disable SSLv3 to avoid the Poodle problem. I'm using the following instructions as a guidleine: https://access.redhat.com/solutions/1232413
I've applied the following line to my config ...
- 183
7
votes
1
answer
21k
views
Disable SSLv3 In cURL?
I'm having a problem connecting to a website that is hosted with CloudFlare using cURL. When I try to connect to the website with HTTPS (using curl -v https://www.xxxxxx.com), it says:
* About to ...
- 473
8
votes
1
answer
18k
views
How do I disable SSLv3 in an OpenSSH SSH server to avoid POODLE?
In wake of the newly-discovered POODLE vulnerability, I'd like to disable SSLv3 on all of my SSH servers. How do I achieve this with OpenSSH?
- 5,393
1
vote
2
answers
4k
views
OpenSSL 1.0.1j - "POODLE" vulnerability fix (upgrade) on RHEL 6.5
I've got a problem when I upgraded my OpenSSL on RHEL 6.5. The OpenSSL is missing the library libcrypto.so.10. Instead the openssl 1.0.1j created lib is libcrypto.so.1.0.0. I've made a soft link, but ...
- 11