SID 1:38060

Rule Category

POLICY-OTHER --

Alert Message

POLICY-OTHER SSLv2 Client Hello attempt

Rule Explanation

ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions. Impact: CVSS base score 5.9 CVSS impact score 3.6 CVSS exploitability score 2.2 confidentialityImpact HIGH integrityImpact NONE availabilityImpact NONE Details: Ease of Attack:

What To Look For

This rule alerts when an attempt to identify if SSL version 2 is being used by a system.

Known Usage

No public information

False Positives

No known false positives

Contributors

Talos research team. This document was generated from data supplied by the national vulnerability database, a product of the national institute of standards and technology. For more information see [nvd].