1086969 - poodle vulnerability ( ssl v3 chipers and beast vulnerable )

Status: RESOLVED DUPLICATE of bug 1084577

(www.mozilla.org :: General, defect)

Description

[joe balhis]

Attachment: Capture1.PNG

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:14.0) Gecko/20100101 Firefox/14.0.1
Build ID: 20120713134347

Steps to reproduce:

Hi

a medium bug in mozilla.org ( official website ) poodle attack vulnerability

Supported cipher suites (ORDER IS NOT SIGNIFICANT):
  SSLv3
     RSA_WITH_3DES_EDE_CBC_SHA
     RSA_WITH_AES_128_CBC_SHA
     DHE_RSA_WITH_AES_128_CBC_SHA
     RSA_WITH_AES_256_CBC_SHA
     DHE_RSA_WITH_AES_256_CBC_SHA
 
BEAST status: vulnerable
CRIME status: protected

fix it please

thanks




Actual results:

RSA_WITH_3DES_EDE_CBC_SHA
     RSA_WITH_AES_128_CBC_SHA
     DHE_RSA_WITH_AES_128_CBC_SHA
     RSA_WITH_AES_256_CBC_SHA
     DHE_RSA_WITH_AES_256_CBC_SHA  sslv3 chipers


Expected results:

fixt it thanks

Comment 2

[Daniel Veditz [:dveditz]]

(In reply to joe balhis from comment #0)
> User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:14.0) Gecko/20100101
> Firefox/14.0.1

I hope that's a spoofed user agent: we plan to release Firefox 34 next month. That's more than two year's worth of missing security fixes you've got there (mote, meet log).