Skip to content

Commit

Permalink
regression fix: output for CVE-2015-3197 was missing in DROWN
Browse files Browse the repository at this point in the history
  • Loading branch information
drwetter committed Sep 20, 2017
1 parent c5ac8c9 commit ed88add
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion testssl.sh
Original file line number Diff line number Diff line change
Expand Up @@ -10550,7 +10550,8 @@ run_drown() {
if [[ "$lines" -gt 1 ]]; then
nr_ciphers_detected=$((V2_HELLO_CIPHERSPEC_LENGTH / 3))
if [[ 0 -eq "$nr_ciphers_detected" ]]; then
fileout "drown" "HIGH" "SSLv2 is offered, but could not detect a cipher, Make sure you don't use this certificate elsewhere, see https://censys.io/ipv4?q=$cert_fingerprint_sha2" "$cve" "$cwe" "$hint"
prln_svrty_high "CVE-2015-3197: SSLv2 supported but couldn't detect a cipher (NOT ok)";
fileout "drown" "HIGH" "SSLv2 offered, but could not detect a cipher (CVE-2015-3197. Make sure you don't use this certificate elsewhere, see https://censys.io/ipv4?q=$cert_fingerprint_sha2" "$cve" "$cwe" "$hint"
else
prln_svrty_critical "VULNERABLE (NOT ok), SSLv2 offered with $nr_ciphers_detected ciphers";
fileout "drown" "CRITICAL" "VULNERABLE, SSLv2 offered with $nr_ciphers_detected ciphers. Make sure you don't use this certificate elsewhere, see https://censys.io/ipv4?q=$cert_fingerprint_sha2" "$cve" "$cwe" "$hint"
Expand Down

0 comments on commit ed88add

Please sign in to comment.