SecurityFocus

IIS 5.0 WebDAV -Proof of concept-. Fully documented. Mar 25 2003 06:25PM
Roman Medina (roman rs-labs com) (2 replies)

TLS timing attack on OpenSSL [can-2003-78] [bid 6884] exploit Mar 26 2003 12:53PM
Martin Vuagnoux (bugtraq vuagnoux com)

Hi,
Here you can find the tool used to make a "proof of concept" for the
Vaudenay's TLS Timing Attack for < OpenSSL/9.7a. (CAN-2003-78)
BID REF: 6884

http://omen.vuagnoux.com

This attack was tested on a IMAPrev4 server (WU) encapsuled by
stunnel-3.22 using OpenSSL/9.7 and Microsoft Outlook Express 6.x IMAP
client.

Enjoy :^)

Martin Vuagnoux - ilion's lab member - www.ilionsecurity.ch

[ reply ]

Re: IIS 5.0 WebDAV -Proof of concept-. Fully documented. Mar 25 2003 07:06PM
Dave Aitel (dave immunitysec com)