oss-sec mailing list archives

Re: CVE Request?: konqueror - https uses all ciphers, even weak ones


From: Hanno Böck <hanno () hboeck de>
Date: Tue, 4 Mar 2014 16:05:48 +0100

On Tue, 4 Mar 2014 11:12:57 +0000
John Haxby <john.haxby () oracle com> wrote:

I suspect that this problem is fairly wide-ranging.   Apple’s Safari
also permits the link.   Google Chrome doesn’t permit the link
though, it just crashes :)

I added this to the chromium bug tracker:
https://code.google.com/p/chromium/issues/detail?id=348987

There's however something interesting: I couldn't reproduce the crash
setup. I created my own test server with a 16 bit exchange and it
doesn't crash. I haven't found out yet what the difference is that's
causing this.
https://dh16.dosdriver.de

-- 
Hanno Böck
http://hboeck.de/

mail/jabber: hanno () hboeck de
GPG: BBB51E42

Attachment: signature.asc
Description:


Current thread: