SSLv3 Vulnerability - Revision history

Docs admin at 23:44, 24 November 2014

2014-11-24T23:44:34Z

← Older revision		Revision as of 19:44, 24 November 2014
Line 11:		Line 11:


	If you have any questions, please open a ticket within your {{Client Area}}		If you have any questions or concerns, please to open a new support ticket within your {{Client Area}}.

Docs admin at 23:43, 24 November 2014

2014-11-24T23:43:17Z

← Older revision		Revision as of 19:43, 24 November 2014
Line 9:		Line 9:

	Additional information can be found at the following link: [https://documentation.cpanel.net/display/CKB/How+to+Adjust+Cipher+Protocols https://documentation.cpanel.net/display/CKB/How+to+Adjust+Cipher+Protocols]		Additional information can be found at the following link: [https://documentation.cpanel.net/display/CKB/How+to+Adjust+Cipher+Protocols https://documentation.cpanel.net/display/CKB/How+to+Adjust+Cipher+Protocols]


			If you have any questions, please open a ticket within your {{Client Area}}

Docs admin at 17:03, 24 November 2014

2014-11-24T17:03:17Z

← Older revision		Revision as of 13:03, 24 November 2014
Line 2:		Line 2:


	Starting in WHM/cPanel 11.46, there ~~is a~~ separate SSL cypher ~~setting~~ for all services managed by your cPanel server. The SSLv2 and SSLv3 ~~cyphers~~ are disabled by default in 11.46.		Starting in WHM/cPanel 11.46, there are separate SSL cypher and protocol settings for all services managed by your cPanel server. The SSLv2 and SSLv3 protocols are disabled by default in 11.46.

Docs admin at 16:56, 24 November 2014

2014-11-24T16:56:45Z

← Older revision		Revision as of 12:56, 24 November 2014
Line 2:		Line 2:


	Starting in WHM/cPanel 11.46, there is a separate SSL cypher ~~protocol~~ setting for all services managed by your cPanel server. The SSLv2 and SSLv3 cyphers are disabled by default in 11.46.		Starting in WHM/cPanel 11.46, there is a separate SSL cypher setting for all services managed by your cPanel server. The SSLv2 and SSLv3 cyphers are disabled by default in 11.46.

Docs admin at 16:55, 24 November 2014

2014-11-24T16:55:12Z

← Older revision		Revision as of 12:55, 24 November 2014
Line 1:		Line 1:
	Most attacks against SSL modify data as it travels between the client and the server, in order to target weaknesses in specific ciphers. For example, the POODLE attack (CVE-2014-3566) targets weaknesses in the SSLv3 protocol.		Most attacks against SSL modify data as it travels between the client and the server, in order to target weaknesses in specific ciphers. For example, the POODLE attack (CVE-2014-3566) targets weaknesses in the SSLv3 protocol.


	Starting in WHM/cPanel 11.46, there is a separate SSL cypher protocol setting for all services managed by your cPanel server. The SSLv2 and SSLv3 cyphers are disabled by default in 11.46.		Starting in WHM/cPanel 11.46, there is a separate SSL cypher protocol setting for all services managed by your cPanel server. The SSLv2 and SSLv3 cyphers are disabled by default in 11.46.


	If your server has not updated to cPanel 11.46, we recommend performing any needed updates and then updating cPanel to the latest version.		If your server has not updated to cPanel 11.46, we recommend performing any needed updates and then updating cPanel to the latest version.

Docs admin at 16:54, 24 November 2014

2014-11-24T16:54:30Z

← Older revision		Revision as of 12:54, 24 November 2014
Line 1:		Line 1:
	Most attacks against SSL modify data as it travels between the client and the server, in order to target weaknesses in specific ciphers. For example, the POODLE attack (CVE-2014-3566) targets weaknesses in the SSLv3 protocol.		Most attacks against SSL modify data as it travels between the client and the server, in order to target weaknesses in specific ciphers. For example, the POODLE attack (CVE-2014-3566) targets weaknesses in the SSLv3 protocol.

	Starting in WHM/cPanel 11.46, there is a separate SSL cypher protocol setting for all services managed by your cPanel server. The SSLv2 and SSLv3 cyphers are disabled by default:		Starting in WHM/cPanel 11.46, there is a separate SSL cypher protocol setting for all services managed by your cPanel server. The SSLv2 and SSLv3 cyphers are disabled by default in 11.46.

	~~WHM/cPanel and Webmail~~

	~~WebDisk~~

	~~Courier (Mail)~~

	~~DoveCot (Mail)~~

	~~Apache (http)~~

	~~Exim (Mail)~~

			If your server has not updated to cPanel 11.46, we recommend performing any needed updates and then updating cPanel to the latest version.


	Additional information can be found at the following link: [https://documentation.cpanel.net/display/CKB/How+to+Adjust+Cipher+Protocols https://documentation.cpanel.net/display/CKB/How+to+Adjust+Cipher+Protocols]		Additional information can be found at the following link: [https://documentation.cpanel.net/display/CKB/How+to+Adjust+Cipher+Protocols https://documentation.cpanel.net/display/CKB/How+to+Adjust+Cipher+Protocols]

Docs admin: Created page with "Most attacks against SSL modify data as it travels between the client and the server, in order to target weaknesses in specific ciphers. For example, the POODLE attack (CVE-20..."

2014-11-24T16:49:44Z

Created page with "Most attacks against SSL modify data as it travels between the client and the server, in order to target weaknesses in specific ciphers. For example, the POODLE attack (CVE-20..."

New page

Most attacks against SSL modify data as it travels between the client and the server, in order to target weaknesses in specific ciphers. For example, the POODLE attack (CVE-2014-3566) targets weaknesses in the SSLv3 protocol.

Starting in WHM/cPanel 11.46, there is a separate SSL cypher protocol setting for all services managed by your cPanel server. The SSLv2 and SSLv3 cyphers are disabled by default:

WHM/cPanel and Webmail

WebDisk

Courier (Mail)

DoveCot (Mail)

Apache (http)

Exim (Mail)

Additional information can be found at the following link: [https://documentation.cpanel.net/display/CKB/How+to+Adjust+Cipher+Protocols https://documentation.cpanel.net/display/CKB/How+to+Adjust+Cipher+Protocols]