Re: How to check for SSL1 ?

From: Michael Sierchio (kudzu_at_tenebras.com)
Date: 09/30/05

  • Next message: Andy Meyers: "RE: Vulnerability assessment for small business"
    Date: Thu, 29 Sep 2005 20:25:55 -0700
    To: pen-test@securityfocus.com
    
    

    Thomas Springer wrote:

    > - ssl v1 (ancient, considered vulnerable to mitm-attacks)
    > - ssl v2 (old, considered vulnerable to mitm-attacks, but still
    > supported by some servers)
    > - ssl v3 (considered secure, but seldom used)
    > - tls 1.0 (typically preferred these days)

    I have no idea where you come by your ideas, but SSLv3 is much
    more widely deployed on servers than TLSv1.0.

    ------------------------------------------------------------------------------
    Audit your website security with Acunetix Web Vulnerability Scanner:

    Hackers are concentrating their efforts on attacking applications on your
    website. Up to 75% of cyber attacks are launched on shopping carts, forms,
    login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
    futile against web application hacking. Check your website for vulnerabilities
    to SQL injection, Cross site scripting and other web attacks before hackers do!
    Download Trial at:

    http://www.securityfocus.com/sponsor/pen-test_050831
    -------------------------------------------------------------------------------


  • Next message: Andy Meyers: "RE: Vulnerability assessment for small business"

    Relevant Pages

    • RE: 3rd party vuln assesment firms
      ... > "We use the same tools hackers bring to bear against your systems. ... >> I'm looking for a firm to conduct annual 3rd party vulnerability ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)
    • Re: Active Directory user enumeration
      ... > Audit your website security with Acunetix Web Vulnerability Scanner: ... > login pages, dynamic content etc. Firewalls, SSL and locked-down servers are ... Cross site scripting and other web attacks before hackers do! ...
      (Pen-Test)
    • RE: Getting Printer IP Addresses Prior to Pen Testing - Question About DHCP
      ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Hackers are concentrating their efforts on attacking applications on your ... Up to 75% of cyber attacks are launched on shopping carts, forms, ... login pages, dynamic content etc. Firewalls, SSL and locked-down servers are ...
      (Pen-Test)
    • Re: Ping a mac address
      ... Axis print servers... ... > Audit your website security with Acunetix Web Vulnerability Scanner: ... Cross site scripting and other web attacks before hackers do! ...
      (Pen-Test)
    • RE: 3rd party vuln assesment firms
      ... > "We use the same tools hackers bring to bear against your systems. ... >> I'm looking for a firm to conduct annual 3rd party vulnerability ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)