VDB
ALAS-2016-661
ALAS-2016-661
PUBLISHED
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Amazon | openssl |
Exploit Intelligence
- A2SV = Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc Support Vulnerability [CVE-2007-1858] Anonymous Cipher [CVE-2012-4929] CRIME(SPDY) [CVE-2014-0160] CCS Injection [CVE-2014-0224] HeartBleed [CVE-2014-3566] SSLv3 POODLE [CVE-2015-0204] FREAK Attack [CVE-2015-4000] LOGJAM Attack [CVE-2016-0800] SSLv2 DROWN Installation : $ apt update && apt upgrade $ apt install git $ apt install python2 $ apt install python $ git clone https://github.com/hahwul/ a2... (github-poc-repo)
- Performs a testssl.sh test on SSL/TLS port and displays tool output. (nmap-nse)
- Determines whether the server supports SSLv2, what ciphers it supports and tests for CVE-2015-3197, CVE-2016-0703 and CVE-2016-0800 (DROWN) (nmap-nse)
- releasenotes.html (github-poc)
- glcve_test.go (github-poc)
Timeline
- Mar 10, 2016 CVE Published
- Jul 7, 2016 PoC Published
- Apr 11, 2025 PoC Published
References
- ALAS-2016-661: openssl (important) advisory