Oval Definition:	oval:org.cisecurity:def:1765
Revision Date: 2017-02-24 Version: 11 Title: Vulnerability in SSL 3.0 as used in OpenSSL through 1.0.1i - CVE-2014-3566 Description: The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2014-3566 Platform(s): Microsoft Windows 10 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2016 Microsoft Windows Vista Microsoft Windows XP Product(s): OpenSSL Definition Synopsis OpenSSL is installed + file version OpenSSL is installed AND Check for file version Check if OpenSSL 1.0.1 version is greater than or equal 1.0.1 and less than 1.0.1j OR Check if OpenSSL 1.0.0 version is greater than or equal 1.0.0 and less than 1.0.0o OR Check if OpenSSL 0.9.8 version is greater than or equal 0.9.8 and less than 0.9.8zc OR OpenSSL (x86) is installed + file version OpenSSL (32_bit) is installed AND Check for file version Check if OpenSSL 1.0.1 version is greater than or equal 1.0.1 and less than 1.0.1j (x86) OR Check if OpenSSL 1.0.0 version is greater than or equal 1.0.0 and less than 1.0.0o (x86) OR Check if OpenSSL 0.9.8 version is greater than or equal 0.9.8 and less than 0.9.8zc (x86) OR Check if ssleay32.dll 1.0.1 version is greater than or equal 1.0.1 and less than 1.0.1j on ProgramFilesDir OR Check if ssleay32.dll 1.0.1 version is greater than or equal 1.0.1 and less than 1.0.1j on ProgramFilesDir (x86) OR Check if ssleay32.dll 1.0.1 version is greater than or equal 1.0.1 and less than 1.0.1j on System32 and SysWOW64 OR Check if ssleay32.dll 1.0.0 version is greater than or equal 1.0.0 and less than 1.0.0o on ProgramFilesDir OR Check if ssleay32.dll 1.0.0 version is greater than or equal 1.0.0 and less than 1.0.0o on ProgramFilesDir (x86) OR Check if ssleay32.dll 1.0.0 version is greater than or equal 1.0.0 and less than 1.0.0o on System32 and SysWOW64 OR Check if ssleay32.dll 0.9.8 version is greater than or equal 0.9.8 and less than 0.9.8zc on ProgramFilesDir OR Check if ssleay32.dll 0.9.8 version is greater than or equal 0.9.8 and less than 0.9.8zc on ProgramFilesDir (x86) OR Check if ssleay32.dll 0.9.8 version is greater than or equal 0.9.8 and less than 0.9.8zc on System32 and SysWOW64
BACK