Want to know how safe is SSL...???

Hi!!!

I am new to SSL programming: currently trying to "play" with it... :-)

>From whatever I know about SSL, I believe that SSL has a serious security
vulnerability associated with Man-In-The-Middle attack(Kindly correct me if
I'm wrong...). If someone can get their hands on the "server key exchange"
message, the rest of the work can be pretty easy for them(Assuming that they
are able to forge a certificate similar to the original cert with the URL of
the original server intended for contact by the client. An easier case will
be if the client does not check with the CA about the cert authenticity
& derives its satisfaction simply by knowing that the cert has been issued
by a trusted CA: which can be achieved by a masquerade)...

I am seriuosly concerned about finding out why and how is this prevented(if
at all:I'm not talking about the certificate validation...) and also how to
demonstrate this in practice... All that one needs to do is to closely
monitor traffic on a server: grab the public key in the server key exchange
message...

Basically, I'm questioning the "uncrakeability" of a 128-bit RSA signature
which is the most basic security measure against this kind of an attack:
Such an attacker can fake the certificate only if he can crack the hash
contained in the certificate issued by the CA using their own private key
and which(obviously) the attacker does not possess....

I would seriously like to hear from the brightest of you about the same...

Warm Regards,

D3|\||\|!$