New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NSE: Add STARTTLS Support to SSLv2.nse #320

Closed
wants to merge 1 commit into
base: master
from

Conversation

Projects
None yet
1 participant
@TomSellers

TomSellers commented Mar 2, 2016

The script sslv2.nse doesn't support STARTTLS. The result is that script misses SSLv2 on certain ports such as SMTP, POP3, etc. These changes add support for STARTTLS. This script has been verified by scanning a host on 443, verifying that the script returns results and then checking the same host on port 25.

NSE: Add STARTTLS Support to SSLv2.nse
The script sslv2.nse doesn't support STARTTLS.  The result is that script misses SSLv2 on certain ports such as SMTP, POP3, etc.  These changes add support for STARTTLS.  This script has been verified by scanning a host on 443, verifying that the script returns results and then checking the same host on port 25.
@TomSellers

This comment has been minimized.

Show comment
Hide comment
@TomSellers

TomSellers Mar 2, 2016

In addition to helping locate and address services supporting SSLv2, the driving need for the change to to help identify services where SSLv2 could be used to attack other TLS services via CVE-2016-0800.

TomSellers commented Mar 2, 2016

In addition to helping locate and address services supporting SSLv2, the driving need for the change to to help identify services where SSLv2 could be used to attack other TLS services via CVE-2016-0800.

@nmap-bot nmap-bot closed this in 318accb Mar 3, 2016

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment