How To Protect A Box From Iis 5.0 Ssl-exploit

Full Version: How To Protect A Box From Iis 5.0 Ssl-exploit

GovernmentSecurity.org > The Archives > Exploit Articles

Fantafour

Apr 26 2004, 09:30 PM

Hi outa there, how can i protect my dedicated server from incoming SSL-Attacks ?

Is there a STABLE MS-Security Patch ?

thanks for every advice !

Khran

Apr 26 2004, 10:23 PM

Disable PCT 1.0

http://support.microsoft.com/default.aspx?...kb;en-us;187498

CODE

1- Click the Start menu, point to Run, and type "regedt32" or "regedit" (without the quotation marks) in the Run dialog box.
2- Click OK.
3- In the Registry Editor, locate the following registry key: HKey_Local_Machine\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Server

4- In the Edit menu, click Add Value.
5- In the Data Type drop-down list, choose REG_BINARY.
6- In the Value Name text box, type "Enabled" (without the quotation marks) and click OK.

NOTE: If this value is already present, double click on the value to edit its current value and proceed with step 7.

7- In the Binary Editor, set the new keys value to equal 0 by entering the following string: 00000000.
8- Click OK and then restart the computer.

Fantafour

Apr 27 2004, 07:11 AM

is it possible to make a *.reg file ?

how to ?

Or does anyone know a good cmd line based reg-editor ?

Khran

Apr 27 2004, 07:49 AM

Notepad ! ;-)

Paste that in a txt file

CODE

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Server]
"Enabled"=hex:00,00,00,00

and save it as a .reg file.

DumpZ

Apr 27 2004, 11:02 AM

I believe reg.exe is a good one, i never tried it though, but it out here on this board somewhere

Fantafour

Apr 27 2004, 12:07 PM

QUOTE (Khran @ Apr 27 2004, 07:49 AM)

Notepad ! ;-)

Paste that in a txt file

CODE

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Server]
"Enabled"=hex:00,00,00,00

and save it as a .reg file.

thanks for your help dude !

Fantafour

Apr 27 2004, 01:04 PM

hmm i tried to execute the .reg file, but it comes every time a error message...

charon255

Apr 27 2004, 03:44 PM

Try here:

http://www.governmentsecurity.org/forum/in...?showtopic=8139

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.