Recently there was another Vulnerability grab My attention which was related to DES and Tripple DES (3DES) , Any men in the middle can exploit this vulnerability by capturing large amount of encrypted data and thus recover plain text sensitive data. Severity : Medium CVE Number : CVE-2016-2183 For Freelance Work & Queries Contact me by Email Id support@linuxforeveryone.com Remediation : You need to disable any ciphers starting with DES and 3DES supported by Server by any service present on server for example Apache Nginx etc Important Point to Remember : 1 : Normally old browser don't supports DES and 3DES ciphers. It is very important to note that in many cases, a software update (back-ported version provided by Operating System vendor ) won't be enough to resolve this issue. Usually software update doesn't overwrite manually tweaked configuration files, which means, DES/3DES can be still available, even if the software up
Started this Blog to share my experience while working on various issues of linux servers and cloud technologies. Here in this blog you can find solutions to different errors we as system admin can face during our daily work. So stay tuned. Also you can go through my start-up to buy Hosting Products like SSL, Wordpress and VPS or Linux and Windows servers at affordable prices.