Welcome, Guest ( Customer Panel | Login )




 All Forums
 VPCart Forum
 Electronic Gateways
 vulnerable to the POODLE exploit?
 New Topic  Reply to Topic
 Printer Friendly
Author Previous Topic Topic Next Topic  

elammers
VP-CART Super User

USA
256 Posts

Posted - October 28 2014 :  16:51:17  Show Profile  Visit elammers's Homepage  Reply with Quote
Is VP-ASP v6 or v7 vulnerable to the POODLE exploit? Does either version use SSLv3 to send transactions?

Regards,
Eric Lammers
www.KrackMedia.com
Building More Than Web Sites . . . Building a Web Presence

support
Administrator

4679 Posts

Posted - October 28 2014 :  23:32:40  Show Profile  Visit support's Homepage  Reply with Quote
Should be all safe for all versions. This is server related, not code so should be ok.

At worst just need to download the latest gateway files from our site if there is an issue but there should not be.

Our servers are already configured to not allow SSLv3.

Thank you.

Cam Flanigan
VP-ASP Cart Support
Go to Top of Page

elammers
VP-CART Super User

USA
256 Posts

Posted - October 29 2014 :  09:10:29  Show Profile  Visit elammers's Homepage  Reply with Quote
In some places, I read that it was also the gateway code that could provide the security exploit. I just wanted to check all angles.

Thanks!

Regards,
Eric Lammers
www.KrackMedia.com
Building More Than Web Sites . . . Building a Web Presence
Go to Top of Page

diegomilito
VP-CART Expert

Argentina
779 Posts

Posted - November 01 2014 :  03:29:52  Show Profile  Reply with Quote
what is poodle exploit ?what kind of it ? how do i know and check ?
diego
Go to Top of Page

elammers
VP-CART Super User

USA
256 Posts

Posted - November 04 2014 :  07:40:23  Show Profile  Visit elammers's Homepage  Reply with Quote
http://www.authorize.net/support/poodlefaqs/

SUMMARY: POODLE is the term used to describe the security vulnerability in the SSL Version 3 cryptogram (i.e. SSLv3) used by older Internet browsers. It was identified the week of October 13, and many Internet service providers are working on deprecating or disabling SSLv3 in their systems to prevent any exploits of the vulnerability.

Once SSLv3 is disabled on a server, it will affect anyone using IE6.

Regards,
Eric Lammers
www.KrackMedia.com
Building More Than Web Sites . . . Building a Web Presence
Go to Top of Page

serjtankian
VP-CART Super User

Armenia
378 Posts

Posted - November 11 2014 :  05:10:41  Show Profile  Visit serjtankian's Homepage  Reply with Quote
hmm.. IE6? anyone still using your daddy''s browser? LOL






*serj*
Go to Top of Page
  Previous Topic Topic Next Topic  
 New Topic  Reply to Topic
 Printer Friendly
Jump To:
Snitz Forums 2000
0 Item(s)
$0.00