New answers tagged

1

Command line tools shouldn't be vulnerable to POODLE. The reason is that POODLE is a cross-domain attack where the attacker can send cross-origin requests to the vulnerable endpoint and then use their Man-in-the-Middle/eavesdropper position to read cookie data sent with the request. An attacker can run Javascript in any origin in a browser and cause ...


1

I would start by finding out which SSL library it is using. I wouldn't be surprised if it used (maybe embedded) an old openssl version, in which case there would be a number of vulnerabilities to take into account that could be easily extracted, not just poodle. As pointed out by schroeder, you could launch a webserver that doesn't speak anything newer ...



Top 50 recent answers are included