3.1K

The SSLv3 POODLE vulnerability, disclosed on October 14, 2014, is a protocol-level security flaw affecting the SSL 3.0 encryption standard. POODLE, which stands for Padding Oracle On Downgraded Legacy Encryption, exploits weaknesses in how SSLv3 handles padding during encryption.

This vulnerability arises when plaintext is converted into ciphertext. To match cryptographic requirements, extra padding is added, and during decryption, this padding can leak sensitive information. Attackers can take advantage of this flaw through a man-in-the-middle (MITM) attack, gradually decrypting secure communications.

How to Check if Your WHM/cPanel Server is Vulnerable

To verify whether SSLv3 is enabled on your server, log in via SSH as the root user and run the following command:

openssl s_client -connect <server>:<port> -ssl3

Example:

openssl s_client -connect example.com:443 -ssl3

• If the connection is successful, SSLv3 is active, and your server may be vulnerable.
• If the connection fails, SSLv3 is disabled, and your server is secure.

A typical secure response will show:

error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure

Advanced Vulnerability Check Script

You can also use the following script to scan multiple ports:

for port in 21 443 465 993 995 2083 2087 2078 2096; do 
  echo "Scanning $port"; 
  for cipher in $(openssl ciphers -sslv3 'ALL:eNULL' | sed -e 's/:/ /g'); do 
    echo -n | openssl s_client -sslv3 -cipher "$cipher" -connect xx.yy.zz.aa:$port 2>&1 | grep -i "Cipher is"; 
  done; 
done

Replace xx.yy.zz.aa with your server’s IP address.

• If any cipher is returned, your system is vulnerable.
• No output indicates SSLv3 is disabled.

Why Disabling SSLv3 is Important

SSL 3.0 is still supported by some legacy services such as webmail, FTP, and email clients. This makes multiple services vulnerable, including:

• HTTP (Web Server)
• POP3 & IMAP (Mail Services)
• SMTP (Mail Transfer)
• FTP
• WHM/cPanel Control Panel
• Web Disk

Disabling SSLv3 across all these services is essential to protect your server from exploitation.

Need expert assistance?

SupportPRO has a team of well-experienced professionals. We can assist you in patching and fixing the mentioned vulnerabilities if found in your server. Feel free to contact us if you need assistance.

If you require help, contact SupportPRO Server Admin