Researchers have found new attack against 3DES-CBC cipher in TLS,that they can decrypt customer data using a method called SWEET32 Birthday Attack. This Vulnerability has got CVE-2016-2183 and has cvss score 5.0 This vulnerability can be found manually by simply using nmap script nmap -Pn -p --script ssl-enum-ciphers ip Mitigation for SWEET32 attack ->Prefer minimum 128-bit cipher suites ->Limit the length of TLS sessions with a 64-bit cipher, which could be done with TLS renegotiation or closing and starting a new connection -> Disable cipher suites using 3DES Reference link: https://sweet32.info/

Related CVEs

Associated Common Vulnerabilities and Exposures

CVE-2016-2183 UNKNOWN

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as …

Report Details

Additional information and metadata

State

Closed

Substate

Informative

Submitted

Weakness

Cryptographic Issues - Generic