Un petit blog sans prétention (enfin j'espère) sur ce qui retient mon attention en matière de sécurité informatique....mais pas que.
Vulnerability in SSL 3.0 Could Allow Information Disclosure
https://technet.microsoft.com/en-us/library/security/3009008
OpenSSL CVE-2014-3566 Man In The Middle Information Disclosure Vulnerability
http://www.securityfocus.com/bid/70574
SSL v3 “POODLE” Vulnerability Revealed (CVE-2014-3566)
http://www.tripwire.com/state-of-security/vulnerability-management/ssl-v3-poodle-vulnerability-revealed-cve-2014-3566/
VERT Alert: SSL V3 – Poodle Attacks
http://www.tripwire.com/state-of-security/vulnerability-management/vert-alert-ssl-v3-poodle-attacks/
'POODLE' Attacks, Kills Off SSL 3.0
http://www.darkreading.com/attacks-breaches/poodle-attacks-kills-off-ssl-30/d/d-id/1316663
New POODLE SSL 3.0 Attack Exploits Protocol Fallback Issue
http://threatpost.com/new-poodle-ssl-3-0-attack-exploits-protocol-fallback-issue/108844
OpenSSL Releases Patch for POODLE Attack
http://threatpost.com/openssl-releases-patch-for-poodle-attack/108875
Browser Vendors Move to Disable SSLv3 in Wake of POODLE Attack
http://threatpost.com/browser-vendors-move-to-disable-sslv3-in-wake-of-poodle-attack/108852