Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Already on GitHub? Sign in to your account

NSE: Add STARTTLS Support to SSLv2.nse #320

Closed
wants to merge 1 commit into
from

Conversation

Projects
None yet
1 participant

The script sslv2.nse doesn't support STARTTLS. The result is that script misses SSLv2 on certain ports such as SMTP, POP3, etc. These changes add support for STARTTLS. This script has been verified by scanning a host on 443, verifying that the script returns results and then checking the same host on port 25.

NSE: Add STARTTLS Support to SSLv2.nse
The script sslv2.nse doesn't support STARTTLS.  The result is that script misses SSLv2 on certain ports such as SMTP, POP3, etc.  These changes add support for STARTTLS.  This script has been verified by scanning a host on 443, verifying that the script returns results and then checking the same host on port 25.

In addition to helping locate and address services supporting SSLv2, the driving need for the change to to help identify services where SSLv2 could be used to attack other TLS services via CVE-2016-0800.

@nmap-bot nmap-bot closed this in 318accb Mar 3, 2016

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment