[cs615asa] *.shell.com port 443 DROWN decryption attack

Wed Apr 20 05:13:19 EDT 2016

Login:

https://prom3.shell.com/(S(qxq1noy1f4gl4g45kbggia45))/Common/Login.aspx

Vulnerability

An attacker can decrypt traffic and get login and passwords

Signatures

584e3a64196dc662286922fc82fa915f1ee0cc46ab5400c347f529ab4eb46c67
prom3.shell.com
d50be93e35266af753e288af8f4f3eb96986187264a44c6c0d741d051443b1cc

443.https.ssl_2.certificate.parsed.fingerprint_sha256:
5c3bd6ba5b682650ceba4e167023d48e4627a2d7c2005f7f1fdad6f45b3e53a6

&#57347; 443.https.tls.certificate.parsed.fingerprint_sha256:
5c3bd6ba5b682650ceba4e167023d48e4627a2d7c2005f7f1fdad6f45b3e53a6
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.stevens.edu/pipermail/cs615asa/attachments/20160420/930ed16a/attachment.html>