Quantcast
Channel: Symantec Connect - Security
Viewing all articles
Browse latest Browse all 11462

Data Center Security Server Poodle SSL 3.0 vulnerability (CVE-2014-3566)

$
0
0
Oui, j'ai besoin d'une solution

Hi,

We found Poodle SSL 3.0 vulnerability (CVE-2014-3566) on DCS (Data Center Security Server).

I follow the following article but still the vulnerability is appearing.

http://www.symantec.com/business/support/index?page=content&id=TECH226504&actp=search&viewlocale=en_US&searchid=1427169411961

There is difference between articale and our DCS server.xml file.

Article TECH226504 contain following line

clientAuth="false" sslProtocol="TLS"sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2"

ciphers="%comma_separated_list_of_ciphers%"/>

Our Server.xml contain following line.

clientAuth="false" sslProtocol="TLS"sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2" ciphers="SSL_RSA_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_RC4_128_MD5, SSL_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA"/>

Do we have to make same after ciphers=** in order to fix the vulnerability  ?


Viewing all articles
Browse latest Browse all 11462

Trending Articles