SSL Version 2 (v2) Protocol Detection
 
Synopsis :
 
The remote service encrypts traffic using a protocol with known
weaknesses.
 
Description :
 
The remote service accepts connections encrypted using SSL 2.0, which
reportedly suffers from several cryptographic flaws and has been
deprecated for several years. An attacker may be able to exploit
these issues to conduct man-in-the-middle attacks or decrypt
communications between the affected service and clients.
 
See also :
 
http://www.schneier.com/paper-ssl.pdf
http://support.microsoft.com/kb/187498
http://www.linux4beginners.info/node/disable-sslv2
 
Solution :
 
Consult the application's documentation to disable SSL 2.0 and use SSL
3.0 or TLS 1.0 instead.
 
Risk factor :
 
Medium / CVSS Base Score : 5.0
(CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N)
 
Nessus ID : 20007
----------------------------------------------------------
SSL Medium Strength Cipher Suites Supported
 
Synopsis :
 
The remote service supports the use of medium strength SSL ciphers.
 
Description :
 
The remote host supports the use of SSL ciphers that offer medium
strength encryption, which we currently regard as those with key
lengths at least 56 bits and less than 112 bits.
 
Note: This is considerably easier to exploit if the attacker is on the
same physical network.
 
Solution :
 
Reconfigure the affected application if possible to avoid use of
medium strength ciphers.
 
Risk factor :
 
Medium / CVSS Base Score : 4.3
(CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N)
 
Plugin output :
 
Here are the medium strength SSL ciphers supported by the remote server :
 
Medium Strength Ciphers (>= 56-bit and < 112-bit key)
SSLv2
DES-CBC-MD5 Kx=RSA Au=RSA Enc=DES(56) Mac=MD5
SSLv3
DES-CBC-SHA Kx=RSA Au=RSA Enc=DES(56) Mac=SHA1
TLSv1
EXP1024-DES-CBC-SHA Kx=RSA(1024) Au=RSA Enc=DES(56) Mac=SHA1 export
EXP1024-RC4-SHA Kx=RSA(1024) Au=RSA Enc=RC4(56) Mac=SHA1 export
DES-CBC-SHA Kx=RSA Au=RSA Enc=DES(56) Mac=SHA1
 
The fields above are :
 
{OpenSSL ciphername}
Kx={key exchange}
Au={authentication}
Enc={symmetric encryption method}
Mac={message authentication code}
{export flag}
 
Nessus ID : 42873
--------------------------------------------------------------------
SSL Weak Cipher Suites Supported
 
Synopsis :
 
The remote service supports the use of weak SSL ciphers.
 
Description :
 
The remote host supports the use of SSL ciphers that offer either weak
encryption or no encryption at all.
 
Note: This is considerably easier to exploit if the attacker is on the
same physical network.
 
See also :
 
http://www.openssl.org/docs/apps/ciphers.html
 
Solution :
 
Reconfigure the affected application if possible to avoid use of weak
ciphers.
 
Risk factor :
 
Medium / CVSS Base Score : 4.3
(CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N)
 
Plugin output :
 
Here is the list of weak SSL ciphers supported by the remote server :
 
Low Strength Ciphers (< 56-bit key)
SSLv2
EXP-RC2-CBC-MD5 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export
EXP-RC4-MD5 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export
SSLv3
EXP-RC2-CBC-MD5 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export
EXP-RC4-MD5 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export
TLSv1
EXP-RC2-CBC-MD5 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export
EXP-RC4-MD5 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export
 
The fields above are :
 
{OpenSSL ciphername}
Kx={key exchange}
Au={authentication}
Enc={symmetric encryption method}
Mac={message authentication code}
{export flag}
 
Other references : CWE:327, CWE:326, CWE:753, CWE:803, CWE:720
 
Nessus ID : 26928
-----------------------------------------------------------------