Re: MS04-011 Break SSL support in IE 6.0.3790.0 with Windows 2003
From: Thor Larholm (thor_at_PIVX.COM)
Date: Fri, 16 Apr 2004 15:34:05 -0700 To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
This is a functionality regression that has been around for some time.
The weird part of the MS04-011 patch is that it only occurs on Windows
KB261328: Cipher Strength Appears as 0-Bit in Internet Explorer
In Microsoft Internet Explorer, you may experience the following
When you click About Internet Explorer on the Help menu, the Cipher
Strength value is 0-bit.
You cannot connect to and view Web pages on secure Web sites.
This behavior can occur if the Schannel.dll, Rsabase.dll, or Rsaenh.dll
files are missing, damaged, or of the incorrect version.
Senior Security Researcher
24 Corporate Plaza #180
Newport Beach, CA 92660
Phone: +1 (949) 231-8496
6BB1 B77F CB62 0D3D 5A82 C65D E1A4 157C 5A27 6569
PivX defines "Proactive Threat Mitigation". Get a FREE Beta Version of
From: Technoboy [mailto:email@example.com]
Sent: Friday, April 16, 2004 11:04 AM
Subject: [Full-Disclosure] MS04-011 Break SSL support in IE 6.0.3790.0
with Windows 2003
A warning to all Windows 2003 user, this happened on two machine who had
the exact same software configuration but different hardware.
After installing the latest set of patches from microsoft, I was unable
to access sites using SSL, after some investigation it turned out that
my IE Cipher strength was set to 0bit ... After lot of troubleshooting
and tryout with the different solutions offered by Microsoft I decided
to take a guess and uninstall the MS04-011 patch... Well, the problem
solved itself, the IE Cipher Strength is now at 128 like it was before,
I can now access sites using SSL, windowsupdate, msn, etc
Anyone experienced something similar, or its just me ?
Full-Disclosure - We believe in it.
Earn up to 10 credit course hours toward the TruSecure ICSA Practitioner (TICSA) Credential and receive a TICSA exam coupon by attending the Infosecurity Canada 2004 conference. Featured speaker, Marcus J. Ranum, TruSecure inventor of the proxy firewall will present on June 3 at 11:30 AM. Visit <https://ticsa.trusecure.com> for certification details and <http://www.infosecuritycanada.com> for conference information. Become TICSA certified and see what happens!