SID 1:45199

Rule Category

SERVER-OTHER -- Snort has detected traffic exploiting vulnerabilities in a server in the network.

Alert Message

SERVER-OTHER limited RSA ciphersuite list - possible Bleichenbacher SSL attack attempt

Rule Explanation

This event is generated when a limited number of RSA ciphersuites are used in a SSL client hello, indicating a possible Bleichenbacher padding oracle attack. Impact: Attempted Information Leak Details: Ease of Attack:

What To Look For

No information provided

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group