FREAK Vulnerability Tester (CVE-2015-0204)
The FREAK Vulnerability is a security vulnerability in OpenSSL that allows attackers to intercept HTTPS connections between vulnerable clients and servers and force them to use “export-grade” cryptography, which can then be decrypted or altered.
From https://freakattack.com/ :
A connection is vulnerable if the server accepts RSA_EXPORT cipher suites and the client either offers an RSA_EXPORT suite or is using a version of OpenSSL that is vulnerable to CVE-2015-0204. Vulnerable clients include many Google and Apple devices (which use unpatched OpenSSL), a large number of embedded systems, and many other software products that use TLS behind the scenes without disabling the vulnerable cryptographic suites.
Nagios Enterprises provides IT management solutions that monitor your network infrastructure, manage your network bandwidth, and can mitigate or even eliminate the effects of the Freak Vulnerability as well as other security vulnerabilities.
Below is a FREAK Vulnerability tester that can check your systems, websites and more. Simply type in your website, and check to see if you’ve been affected.
For most servers that are found to be vulnerable administrators should be able to update the OpenSSL package and then restart the affected services such as httpd.
If your server is running RHEL or CentOS, the following commands will resolve the security vulnerability:
yum update openssl -y
service httpd restart
If you are already using Nagios Core or XI to monitor your infrastructure, this easy-to-use plugin can notify you if your system is susceptible to the FREAK vulnerability.
Credit: Thanks Martin @ Sysorchestra for sharing the base of the plugin that was modified for this tester.
If you haven’t experienced the benefits of monitoring with Nagios, be sure to check out our products page.