Admin-Ahead Community

Windows => General Windows => Topic started by: Chetan Singh on February 27, 2015, 01:59:10 pm

Title: Vulnerability and Disable SSLv2 in IIS7/7.5
Post by: Chetan Singh on February 27, 2015, 01:59:10 pm
HI,

An attacker may be able to exploit these issues to conduct man-in-the-middle attacks or decrypt communications between the affected service and clients. You can disable SSLv2 via following steps:

#Enter the registryeditor (regedit)

#Locate the following registry key:
 
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0

Create a new key: Server

Create a new DWORD (32-bit) named Enabled and check the data value is the default 0x00000000 (0)

Restart the server

Done!