SSL Weak Ciphers
Mark Timm <[email protected]> Thu, 26 Feb 2009 11:13:12 -0600
| Newsgroups | gmane.comp.security.nessus.general |
|---|---|
| Message-ID | <C5CC29C8.1041F%[email protected]> |
> This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3318491593_609001 Content-Type: multipart/alternative; boundary="----------=_1235668394-11325-185" Content-Transfer-Encoding: 7bit This is a multi-part message in MIME format... ------------=_1235668394-11325-185 Content-type: text/plain; charset="ISO-8859-1" Content-transfer-encoding: quoted-printable On Windows Server 2003 how do I remediate Nessus IDs 26928 and 31705. I=B9= ve already changed these entries at SYSTEM\CurrentControlSet\Control\SecurityProvidersSCHANNEL\Ciphers to Enabled =3D 0: DES 56/56 NULL RC2 40/128 RC4 40/128 RC4 56/128 I=B9ve also changed these entries at SCHANNEL\Protocols to Enabled =3D 0: PCT 1.0\Client PCT 1.0\Server SSL 2.0\Client SSL 2.0\Server And the vulnerabilities are still reported. ------------=_1235668394-11325-185 Content-type: text/html; charset="ISO-8859-1" Content-transfer-encoding: quoted-printable <HTML> <HEAD> <TITLE>SSL Weak Ciphers</TITLE> </HEAD> <BODY> <FONT FACE=3D"Calibri, Verdana, Helvetica, Arial"><SPAN STYLE=3D'font-size:= 11pt'>On Windows Server 2003 how do I remediate Nessus IDs 26928 and 31705.= I’ve already changed these entries at SYSTEM\CurrentControlSet= \Control\SecurityProvidersSCHANNEL\Ciphers to Enabled =3D 0:<BR> <BR> DES 56/56<BR> NULL<BR> RC2 40/128<BR> RC4 40/128<BR> RC4 56/128<BR> <BR> I’ve also changed these entries at SCHANNEL\Protocols to Enabled =3D = 0:<BR> <BR> PCT 1.0\Client<BR> PCT 1.0\Server<BR> SSL 2.0\Client<BR> SSL 2.0\Server<BR> <BR> And the vulnerabilities are still reported.<BR> </SPAN></FONT> </BODY> </HTML> ------------=_1235668394-11325-185-- --B_3318491593_609001 Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: 7bit Content-Description: Signature The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. If the reader of this message is not the intended recipient, you are hereby notified that your access is unauthorized, and any review, dissemination, distribution or copying of this message including any attachments is strictly prohibited. If you are not the intended recipient, please contact the sender and delete the material from any computer. --B_3318491593_609001 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus --B_3318491593_609001--