welcome to netwrkspider

Wednesday, October 15, 2014

How to check SSLv3 POODLE vulnerability & Securing your server from SSLv3 Poodle vulnerability.

#How to scan for SSL POODLE / SSLv3 Bug and Security.

Today Google researchers announced (PDF link) that they have found a bug in the SSL 3.0 protocol. The exploit could be used to intercept critical data that’s supposed to be encrypted between clients and servers. The details are given below.
URL : http://googleonlinesecurity.blogspot.in/2014/10/this-poodle-bites-exploiting-ssl-30.html
PDF : https://www.openssl.org/~bodo/ssl-poodle.pdf

#How to scan SSLv3 on server side.

A ) Method 1: using cipherscan




B ) Mehod 2 : using openssl

root@ThinkPad-T430:/opt/xnull# openssl s_client -connect flipkart.com:443 -ssl3



Note : if handshake failure No sslv3 supporting on server and its secure. if handshake successful then
disable your SSLv3 on Server because there is no patch available for SSLv3.

C) Method 3 : using Nmap

nmap --script ssl-enum-ciphers -p 443 myntra.com


#How to test your client (i.e Browser) for SSLv3 Bug.

https://www.poodletest.com/



#Solution :

https://zmap.io/sslv3/browsers.html


#How to Secure your Server with SSLv3 Bug

A ) Apache httpd Server .

If you're running Apache, just include the following line in your configuration among the other SSL directives:

SSLProtocol All -SSLv2 -SSLv3


restart your apache services.

B ) NGINX Server : 


If you're running Nginx, just include the following line in your configuration among the other SSL directives:


ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

restart your nginx services.

C ) Postfix SMTP

For 'opportunistic SSL' (encryption policy not enforced and plain is acceptable too), you don't need to change anything. Even SSLv2 is better than plain, so if you need to secure your server you should be using 'mandatory SSL' mode anyway.

For 'mandatory SSL' mode being configured already, just add/change the smtpd_tls_mandatory_protocols setting:

smtpd_tls_mandatory_protocols=!SSLv2,!SSLv3

and restart Postfix:


D ) Sendmail

These options are configured in the LOCAL_CONFIG section of your sendmail.mc

LOCAL_CONFIG
O CipherList=HIGH
O ServerSSLOptions=+SSL_OP_NO_SSLv2 +SSL_OP_NO_SSLv3 +SSL_OP_CIPHER_SERVER_PREFERENCE
O ClientSSLOptions=+SSL_OP_NO_SSLv2 +SSL_OP_NO_SSLv3

E ) Dovecot

In Dovecot v2.1+, add the following to your /etc/dovecot/local.conf (or a new file in /etc/dovecot/conf.d): Note : depends on your configuration file.

ssl_protocols = !SSLv2 !SSLv3

and restart Dovecot:

F ) HAProxy Server

SSL is supported in HAProxy >= 1.5.

Edit the /etc/haproxy.cfg file and find your bind line. Append no-sslv3. For example:

bind :443 ssl crt ciphers no-sslv3

G) OpenVPN

Seems to be unaffected (source).

OpenVPN uses TLSv1.0, or (with >=2.3.3) optionally TLSv1.2 and is thus not impacted by POODLE.


4 comments:

telugu mana tech said...

Hi very good article thanks for sharing keep up the good work!

Hello
Such a great and informative article.
Thanks for sharing
Hi very good article thanks for sharing keep up the good work!
flipkart Credit card offers
flipkart cashsback offers

telugu mana tech said...

Grab Cashback - Up to 50% Off at Flipkart SHOP NOW,
ICICI debit card EMI offers - Flipkart,
Debit card EMI facility - Flipkart,
ICICI debit card EMI offers - Flipkart,
Flipkart HDFC EMI offers,
Grab Cashback - Up to 50% Off at Flipkart SHOP NOW,
10% Instant Discount on SBI Credit Cards at Flipkart,
10% Instant Discount on SBI Credit Cards - Flipkart
10% Instant Discount with HDFC Bank Debit and Credit at Flipkart
10% Instant Discount on SBI Credit Cards - Flipkart,
10% Instant Discount on SBI Credit Cards at Flipkart
Monsoon Offers on Home Appliances - Flipkart,
Flipkart SBI Offer 2019: 10% Instant Cashback,
Flipkart HDFC Offer 2019: 10% Instant Offer,
Flipkart Cashback offer 2019: 10% Cashback,
Cashless Pay Store - Flipkart,
Flat Rs. 4000 instant discount on transactions made using at Flipkart,
No Cost EMI available on Credit Cards Valid till 10 January at Flipkart
Diwali Festive Sale from 9pm - Flipkart
10% Off on All Cards on Home Appliances - Flipkart
10% Off on Cooling Days at Flipkart on SBI Credit Cards | SBI Card
flipkart samsung carnival,
flipkart mobiles,
TV & appliances Sale (Axis Bank Offer) at Flipkart,
10% Off on purchase of Fashion, Home & Furniture and at Flipkart,

Air purifiers Offers - Flipkart,
Offer Details - Flipkart,
SBI Debit Card Offer at Flipkart,
Extended Warranty on Appliances - Flipkart,
Ganesh Chaturthi Festive Offers - Flipkart,
EMI on Debit Cards - Flipkart,
Top selling Latest Mobiles - Flipkart,
Honor Mobiles Day - Flipkart
Axis Bank Debit Card - Flipkart,
HDFC Debit Cards - Flipkart,
ICICI Debit Cards - Flipkart,
Top selling Latest Mobiles - Flipkart,
Explore New & Latest Mobiles of this season - Flipkart
Republic Day Sale - 10% Instant Discount on SBI Credit Cards - Flipkart
Flipkart cashback offers coupons-Daily discount Coupons
Flipkart Bank offers,
Flipkart Cashback Offers Coupons Electronics ,
Flipkart Cashback offers Lifestyle ,
Flipkart Cashback offers on Music,
Flipkart Cashback offers on Computers devices,
Flipkart Cashback offers on Furniture ,
Flipkart Cashback offers on Footwear ,
Flipkart Cashback offers on Accessories,
Flipkart Cashback offers on Other Products ,
Microwave oven – Get 20% to 55% offer,
Flipkart Cashback offers on Watches,Flipkart Mobile Offers
flipkart Credit card offers
flipkart offers
Flipkart cashback offer
Flipkart Cashback
Flipkart offers 2017
Flipkart SBI Offer
flipkart cashback offers
Flipkart Vouchers
flipkart laptop offers
flipkart mobile Offers
Flipkart cashback Coupons
flipkart offers
flipkart electronics offers
flipkart Clothing Offers
flipkart Air Conditioners

Flipkart Bank Cashback,Cashback Offers
AXIS Bank:10% discount Cashback
ICICI Bank :15% Cashback Discount
Yes bank:10% Cashback Discount
State Bank of India:10% Cashback Discount
HDFC Bank:10% Cashback Discounts
CITI Bank:10% Cashback Discounts
flipkart cashless payday sale
flipkart pay day sale
flipkart cashless payday sale 2018

telugu mana tech said...


Flipkart SBI Offer 2019: 10% Instant Cashback.
Flipkart HDFC Offer 2019: 10% Instant Offer.
Flipkart Cashback offer 2019: 10% Cashback.
Flipkart SBI Offer 2019: 10% Instant Cashback.
Flipkart HDFC Offer 2019: 10% Instant Offer.
Flipkart Cashback offer 2019: 10% Cashback.
SBI Credit Card /Debit Card Offers 10% Instant Cashback
Get Cashbackhttps://www.flipkart.com/?affid=crishkuma1
HDFC Credit Ca rd /Debit Card Offers 10% Instant Cashback
Get Cashbackhttps://www.flipkart.com/?affid=crishkuma1
Citi Bank Credit Card /Debit Card Offers 10% Instant Cashback
Get Cashbackhttps://www.flipkart.com/?affid=crishkuma1
Axis Bank Credit Card /Debit Card Offers 10% Instant Cashback (Extra 5% on Axis Buzz Cards)
Get Cashback
https://www.flipkart.com/?affid=crishkuma1
ICICI Bank Credit Card /Debit Card Offers 10% Instant Cashback
Get Cashback
https://www.flipkart.com/?affid=crishkuma1
YES Bank Credit Card /Debit Card Offers 10% Instant Cashback
Get Cashback
https://www.flipkart.com/?affid=crishkuma1
IDBI Bank Credit Card /Debit Card Offers 10% Instant Cashback
Get Cashback
https://www.flipkart.com/?affid=crishkuma1
Kotak Bank Credit Card /Debit Card Offers 10% Instant Cashback
Get Cashback
https://www.flipkart.com/?affid=crishkuma1
flipkart sbi debit card offers,flipkart offers


flipkart sbi offers
flipkart hdfc offers
flipkart axis offers
flipkart sbi offer
flipkart sbi debit card emi
flipkart sbi credit card offer
flipkart sbi debit card emi
flipkart sbi credit card offers
flipkart hdfc,
flipkart hdfc offer,
flipkart hdfc credit card offer,
flipkart icici debit card emi
flipkart icici credit card offer
flipkart icici offer
flipkart axis,
flipkart axis bank offer

flipkart cashback offers said...


Flipkart SBI Offer 2019: 10% Instant Cashback.
Flipkart HDFC Offer 2019: 10% Instant Offer.
Flipkart Cashback offer 2019: 10% Cashback.
Flipkart SBI Offer 2019: 10% Instant Cashback.
Flipkart HDFC Offer 2019: 10% Instant Offer.
Flipkart Cashback offer 2019: 10% Cashback
SBI Credit Card /Debit Card Offers 10% Instant Cashback
Get Cashback https://www.flipkart.com/?affid=crishkuma1
HDFC Credit Ca rd /Debit Card Offers 10% Instant Cashback
Get Cashback https://www.flipkart.com/?affid=crishkuma1
Citi Bank Credit Card /Debit Card Offers 10% Instant Cashback
Get Cashback https://www.flipkart.com/?affid=crishkuma1
Axis Bank Credit Card /Debit Card Offers 10% Instant Cashback (Extra 5% on Axis Buzz Cards)
Get Cashback
https://www.flipkart.com/?affid=crishkuma1
ICICI Bank Credit Card /Debit Card Offers 10% Instant Cashback
Get Cashback
https://www.flipkart.com/?affid=crishkuma1
YES Bank Credit Card /Debit Card Offers 10% Instant Cashback
Get Cashback
https://www.flipkart.com/?affid=crishkuma1
IDBI Bank Credit Card /Debit Card Offers 10% Instant Cashback
Get Cashback
https://www.flipkart.com/?affid=crishkuma1
Kotak Bank Credit Card /Debit Card Offers 10% Instant Cashback
Get Cashback
https://www.flipkart.com/?affid=crishkuma1
flipkart sbi debit card offers,flipkart offers


flipkart sbi offers
flipkart hdfc offers
flipkart axis offers


flipkart sbi offer
flipkart sbi debit card emi
flipkart sbi credit card offer
flipkart sbi debit card emi
flipkart sbi credit card offers
flipkart hdfc,
flipkart hdfc offer,
flipkart hdfc credit card offer,
flipkart icici debit card emi
flipkart icici credit card offer
flipkart icici offer
flipkart axis,
flipkart axis bank offer