hacking security forum

Re: [Full-Disclosure] MS04-011 Break SSL support in IE 6.0.3790.0 with Windows 2003

From: Michael Evanchik <Mike@MichaelEvanchik.com>
Date: Fri Apr 16 2004 - 16:00:11 EDT

I sure am, i do not want to uninstall the service pack. I looked around for any encryption pack installs but nothing for IE6. This sucks no https sites work.

Mike
  ----- Original Message -----
  From: Technoboy
  To: full-disclosure@lists.netsys.com
  Sent: Friday, April 16, 2004 2:04 PM
  Subject: [Full-Disclosure] MS04-011 Break SSL support in IE 6.0.3790.0 with Windows 2003

  Hello everyone,

  A warning to all Windows 2003 user, this happened on two machine who had the
  exact same software configuration but different hardware.

  After installing the latest set of patches from microsoft, I was unable to
  access sites using SSL, after some investigation it turned out that my IE
  Cipher strength was set to 0bit ... After lot of troubleshooting and tryout
  with the different solutions offered by Microsoft I decided to take a guess
  and uninstall the MS04-011 patch... Well, the problem solved itself, the IE
  Cipher Strength is now at 128 like it was before, I can now access sites
  using SSL, windowsupdate, msn, etc

  Weird ...

  Anyone experienced something similar, or its just me ?

  _______________________________________________
  Full-Disclosure - We believe in it.
  Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Received on Fri Apr 16 17:51:30 2004

This archive was generated by hypermail 2.1.8 : Fri Apr 16 2004 - 18:05:40 EDT

Custom Search