RE: MS04-011 Break SSL support in IE 6.0.3790.0 with Windows 2003

["Thor Larholm" <thor@xxxxxxxx>]

This is a functionality regression that has been around for some time.
The weird part of the MS04-011 patch is that it only occurs on Windows
2003.


KB261328: Cipher Strength Appears as 0-Bit in Internet Explorer
http://support.microsoft.com/?kbid=261328

SYMPTOMS
In Microsoft Internet Explorer, you may experience the following
behaviors: 
When you click About Internet Explorer on the Help menu, the Cipher
Strength value is 0-bit. 

-and- 
You cannot connect to and view Web pages on secure Web sites.

CAUSE
This behavior can occur if the Schannel.dll, Rsabase.dll, or Rsaenh.dll
files are missing, damaged, or of the incorrect version. 



Regards

Thor Larholm
Senior Security Researcher
PivX Solutions
24 Corporate Plaza #180
Newport Beach, CA 92660
http://www.pivx.com
thor@xxxxxxxx
Phone: +1 (949) 231-8496
PGP: 0x5A276569
6BB1 B77F CB62 0D3D 5A82 C65D E1A4 157C 5A27 6569

PivX defines "Proactive Threat Mitigation". Get a FREE Beta Version of
Qwik-Fix
<http://www.qwik-fix.net> 



-----Original Message-----
From: Technoboy [mailto:technoboy@xxxxxxxxxxxxxx] 
Sent: Friday, April 16, 2004 11:04 AM
To: full-disclosure@xxxxxxxxxxxxxxxx
Subject: [Full-Disclosure] MS04-011 Break SSL support in IE 6.0.3790.0
with Windows 2003


Hello everyone,

A warning to all Windows 2003 user, this happened on two machine who had
the exact same software configuration but different hardware.

After installing the latest set of patches from microsoft, I was unable
to access sites using SSL, after some investigation it turned out that
my IE Cipher strength was set to 0bit ... After lot of troubleshooting
and tryout with the different solutions offered by Microsoft I decided
to take a guess and uninstall the MS04-011 patch... Well, the problem
solved itself, the IE Cipher Strength is now at 128 like it was before,
I can now access sites using SSL, windowsupdate, msn, etc

Weird ...

Anyone experienced something similar, or its just me ?

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html