Full Disclosure mailing list archives

Re: MS04-011 Break SSL support in IE 6.0.3790.0 with Windows 2003


From: "Michael Evanchik" <Mike () MichaelEvanchik com>
Date: Fri, 16 Apr 2004 16:00:11 -0400

I sure am, i do not want to uninstall the service pack.  I looked around for any encryption pack installs but nothing 
for IE6.  This sucks no https sites work.

Mike
  ----- Original Message ----- 
  From: Technoboy 
  To: full-disclosure () lists netsys com 
  Sent: Friday, April 16, 2004 2:04 PM
  Subject: [Full-disclosure] MS04-011 Break SSL support in IE 6.0.3790.0 with Windows 2003


  Hello everyone,

  A warning to all Windows 2003 user, this happened on two machine who had the
  exact same software configuration but different hardware.

  After installing the latest set of patches from microsoft, I was unable to
  access sites using SSL, after some investigation it turned out that my IE
  Cipher strength was set to 0bit ... After lot of troubleshooting and tryout
  with the different solutions offered by Microsoft I decided to take a guess
  and uninstall the MS04-011 patch... Well, the problem solved itself, the IE
  Cipher Strength is now at 128 like it was before, I can now access sites
  using SSL, windowsupdate, msn, etc

  Weird ...

  Anyone experienced something similar, or its just me ?

  _______________________________________________
  Full-Disclosure - We believe in it.
  Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread: