File tree Expand file tree Collapse file tree 1 file changed +2
-2
lines changed
modules/auxiliary/scanner/ssl Expand file tree Collapse file tree 1 file changed +2
-2
lines changed Original file line number Diff line number Diff line change @@ -79,9 +79,9 @@ def initialize
79
79
super (
80
80
'Name' => 'OpenSSL Server-Side ChangeCipherSpec Injection Scanner' ,
81
81
'Description' => %q{
82
- This module checks for the OpenSSL ChageCipherSpec (CCS)
82
+ This module checks for the OpenSSL ChangeCipherSpec (CCS)
83
83
Injection vulnerability. The problem exists in the handling of early
84
- CCS messages during session negotation . Vulnerable installations of OpenSSL accepts
84
+ CCS messages during session negotiation . Vulnerable installations of OpenSSL accepts
85
85
them, while later implementations do not. If successful, an attacker can leverage this
86
86
vulnerability to perform a man-in-the-middle (MITM) attack by downgrading the cipher spec
87
87
between a client and server. This issue was first reported in early June, 2014.
You can’t perform that action at this time.
0 commit comments