Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2025-10-31 13:55:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add CVEs for No-STARTTLS vulnerability

Browse Source 
In text output only the original one from Wietse Venema.
The other known so far in JSON/CSV
This commit is contained in:
Dirk
2021-08-08 21:30:35 +02:00
parent 89de30c867
commit aaf6409581
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
testssl.sh
View File

@@ -18317,14 +18317,15 @@ run_tls_truncation() {
:
}
# see https://nostarttls.secvuln.info/
#
run_starttls_injection() {
local uds=""
local openssl_bin=""
local -i socat_pid
local -i openssl_pid
local vuln=false
local cve=""
local cve="CVE-2011-0411 CVE-2021-38084 CVE-2021-33515 CVE-2020-15955 CVE-2021-37844 CVE-2021-37845 CVE-2021-37846 CVE-2020-29548 CVE-2020-15955 CVE-2020-29547"
local cwe="CWE-74"
local hint=""
local jsonID="starttls_injection"
@@ -18336,7 +18337,7 @@ run_starttls_injection() {
pr_headlineln " Checking for STARTTLS injection "
outln
fi
pr_bold " STARTTLS injection" ; out " (experimental) "
pr_bold " STARTTLS injection" ; out " (CVE-2011-0411, exp.) "
# We'll do a soft fail here, also no warning, as I do not expect to have everybody have socat installed
if [[ -z "$SOCAT" ]]; then