full-disclosure - SSL vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <190DFDD2F99A65469B4B15D3658C0D2B71F02A@ptc6.ponderosatel.com>
From: daniels at Ponderosatel.com (Daniel Sichel)
Subject: SSL vulnerability

I am a Sidewinder G2 user. In their latest upgrade they are going away
from an IPSEC based VPN client to SSL. If memory servers me there are
some exploitable issues in SSL. SecureComputing uses a proprietary OS
based on SecureOS based on OpenBSD. I am not sure what flavor of SSL
they use, but I am guessing it's based on Open SSL.
I know this is the right place to ask, so.... What have you folks heard
about recent SSL vulnerabilites, how easy are they to exploit, and are
there any known exploits recently?

Thanks
Dan Sichel