NSE: Add STARTTLS Support to SSLv2.nse #320

Closed
wants to merge 1 commit into
from

Projects

None yet

1 participant

@TomSellers

The script sslv2.nse doesn't support STARTTLS. The result is that script misses SSLv2 on certain ports such as SMTP, POP3, etc. These changes add support for STARTTLS. This script has been verified by scanning a host on 443, verifying that the script returns results and then checking the same host on port 25.

@TomSellers TomSellers NSE: Add STARTTLS Support to SSLv2.nse
The script sslv2.nse doesn't support STARTTLS.  The result is that script misses SSLv2 on certain ports such as SMTP, POP3, etc.  These changes add support for STARTTLS.  This script has been verified by scanning a host on 443, verifying that the script returns results and then checking the same host on port 25.
4af3230
@TomSellers

In addition to helping locate and address services supporting SSLv2, the driving need for the change to to help identify services where SSLv2 could be used to attack other TLS services via CVE-2016-0800.

@nmap-bot nmap-bot pushed a commit that closed this pull request Mar 3, 2016
tomsellers NSE add STARTTLS to sslv2 improving detection of SSLv2 and DROWN orac…
…les. Closes #320
318accb
@nmap-bot nmap-bot closed this in 318accb Mar 3, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment