Hi Wisdom ,

Thanks for sharing the incident information .  In solution section where
written for Monitor network and use firewall rules but how long ?



​​*Regards / Jahangir *​

On Wed, Mar 2, 2016 at 5:09 PM, Wisdom Donkor <[log in to unmask]> wrote:

>
> Dear All,
>
> Network traffic encrypted using an RSA-based SSL certificate may be
> decrypted if enough SSLv2 handshake data can be collected. Exploitation of
> this vulnerability - referred to as DROWN in public reporting - may allow a
> remote attacker to obtain the private key of a server supporting SSLv2.
> CERT-GH encourages users and administrators to review the attached
> advisory for additional information and mitigation details.
>
> Find attached advisory
>
> Kind Regards
>
> CERT-GH
> Operations
> 6th Floor,Ghana House,High Street
> PMB, Ministries Post Office
> Accra,Ghana
> www.cert-gh.org
> -----BEGIN PGP SIGNATURE-----
> Version: BCPG v1.47
>
> iGIEARECACIFAlYOq58bHENFUlQtR0ggPHRlYW1AY2VydC1naC5vcmc+AAoJEPSE
> nVZ6ksPd5ZwAoKDSDLMJwdGtW63kUA7GbxvIn5nfAJwOoLHaf3fZB2ZOKu2rwMLo
> PD99EA==
> =/LMu
> -----END PGP SIGNATURE-----
>
>
> _______________________________________________
> Fellowships-alumni mailing list
> [log in to unmask]
> https://mm.icann.org/mailman/listinfo/fellowships-alumni
>
>


-- 
​