Hi,

On 05.12.2016 16:21, Pierre-d O. wrote:
> Maybe the TLS_Fallback_SCSV kb item should be set elsewhere in the NVT and
> not affect the result of this NVT ?

thanks for the hint. The NVT was updated to reflect the following:

- Only SSLv3 (with CBC ciphers accepted) and no TLSv1.0+ enabled ->
vulnerable
- SSLv3 (with CBC ciphers accepted) and TSLv1.0+ enabled and no
TLS_Fallback_SCSV support -> vulnerable
- SSLv3 (with CBC ciphers accepted) and TSLv1.0+ enabled and
TLS_Fallback_SCSV support -> not vulnerable

The update should hit the feed with the next feed update.

Regards,

-- 

Christian Fischer | PGP Key: 0x54F3CE5B76C597AD
Greenbone Networks GmbH | http://greenbone.net
Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
_______________________________________________
Openvas-plugins mailing list
Openvas-plugins@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-plugins

Reply via email to