full-disclosure - MS04-011 Break SSL support in IE 6.0.3790.0 with Windows 2003

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: Mike at MichaelEvanchik.com (Michael Evanchik)
Subject: MS04-011 Break SSL support in IE 6.0.3790.0 with Windows 2003

I sure am, i do not want to uninstall the service pack.  I looked around for any encryption pack installs but nothing for IE6.  This sucks no https sites work.

Mike
  ----- Original Message ----- 
  From: Technoboy 
  To: full-disclosure@...ts.netsys.com 
  Sent: Friday, April 16, 2004 2:04 PM
  Subject: [Full-Disclosure] MS04-011 Break SSL support in IE 6.0.3790.0 with Windows 2003

  Hello everyone,

  A warning to all Windows 2003 user, this happened on two machine who had the
  exact same software configuration but different hardware.

  After installing the latest set of patches from microsoft, I was unable to
  access sites using SSL, after some investigation it turned out that my IE
  Cipher strength was set to 0bit ... After lot of troubleshooting and tryout
  with the different solutions offered by Microsoft I decided to take a guess
  and uninstall the MS04-011 patch... Well, the problem solved itself, the IE
  Cipher Strength is now at 128 like it was before, I can now access sites
  using SSL, windowsupdate, msn, etc

  Weird ...

  Anyone experienced something similar, or its just me ?

  _______________________________________________
  Full-Disclosure - We believe in it.
  Charter: http://lists.netsys.com/full-disclosure-charter.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040416/0e67464f/attachment.html