How to test FREAK Attack (CVE-2015-0204) and Fix?

Is your web site protected from FREAK Assault?

Net safety is a subject lately. There’s at all times one thing to maintain Safety Knowledgeable busy and the title of the vulnerabilities is a bit catchy like Coronary heart Bleed, Poodle and now Freak assault.

On this information I clarify how one can decide whether or not your web site is affected and how one can repair the vulnerabilities.

Introduction

In case you are or know nothing about Freak Assault, listed here are some phrases. Karthikeyan Bhargavan found FREAK assault vulnerability at INRIA in Paris.

On March 3, 2015, it was introduced {that a} new SSL/TLS vulnerability would permit an attacker to intercept the HTTPS connection between susceptible consumer and server and power them to make use of weak encryption. This may assist an attacker steal or manipulate delicate information.

Examine in case your server is susceptible

In case your internet server accepts it RSA_EXPORT cipher suites, you are in danger. You possibly can test your HTTPS URL on the following hyperlink.

• https://www.ssllabs.com/ssltest/
• https://geekflare.com/instruments/tls-scanner
• https://instruments.keycdn.com/freak

Repair FREAK Assault safety vulnerability

Apache HTTP server – you may disable EXPORT cipher suites by including beneath to your httpd.conf or SSL config file.

SSLCipherSuite !EXPORT

Chances are you’ll have already got an SSLCipherSuite line in your configuration file. In that case, you simply want so as to add !EXPORT on the finish of the road.

In case you are new to configuration, you may learn my Apache Net Server Safety & Hardening Information.

Nginx – add the next to your configuration file.

ssl_ciphers '!EXPORT';

As well as, you need to use the SSL configuration generator or Mozilla’s advisable configuration to guard in opposition to SSL/TLS vulnerabilities.

As a web site proprietor or safety engineer, it is best to commonly carry out a safety scan in your web site to detect and be notified of any new vulnerabilities.

You may additionally be involved in find out how to resolve the Logjam assault.