{"id":2361,"date":"2014-10-28T14:11:51","date_gmt":"2014-10-28T14:11:51","guid":{"rendered":"http:\/\/www.accuwebhosting.com\/blog\/?p=2361"},"modified":"2025-01-27T05:25:54","modified_gmt":"2025-01-27T05:25:54","slug":"protect-whm-server-against-poodle","status":"publish","type":"post","link":"https:\/\/www.accuwebhosting.com\/blog\/protect-whm-server-against-poodle\/","title":{"rendered":"How Do I Protect my WHM Server Against POODLE?"},"content":{"rendered":"

\"Protect<\/a><\/p>

What is POODLE?<\/h2>

The “POODLE” (Padding Oracle On Downgraded Legacy Encryption) is a protocol downgrade attack in design of cryptographic protocol SSL version 3.0<\/a>. This bug was recently discovered by Google Security Team researcher Bodo Möller in collaboration with Thai Duong and Krzysztof Kotowicz.<\/p>

What does POODLE do?<\/h2>

In a Poodlebleed attack, intruders can force a connection to “fallback” to SSL 3.0. In this way, the attacker can access the plain text information from communication. Due to the bug in SSL 3.0, attackers can also steal cookies (small data files that enable persistent access to an online service). These small data files can easily allow an attacker access to any kind of Web-based accounts. As a security exploit, it can affect all web browsers and servers and therefore any one of us could be vulnerable.<\/p>

How do I protect Browsers against POODLE?<\/h2>

First check if you are POODLE vulnerable? Simply browse Qualys SSL Labs’ SSL Client Test<\/i><\/a> website. If you get a message “Your user agent is vulnerable. You should disable SSL 3.”<\/em>, you are supposed to do some cleaning in browsers.<\/p>

The simplest thing you can do to protect browsers is disabling SSLv3 support. Therefore, even if the server does offer SSLv3 support, your browser will deny to use it. If SSL 3.0 is disabled on your browser, POODLE cannot downgrade the cryptographic protocol to use it. Refer to the following article on How to disable SSL 3.0 in all major browsers (IE, Chrome, and FireFox)<\/p>

https:\/\/www.digicert.com\/ssl-support\/disabling-browser-support-ssl-v3.htm<\/i><\/a><\/p>

Please note that plenty of websites are still using SSLv3. If you disable SSL 3.0 from your browser, those sites might not work well for you.<\/p>

How do I protect my WHM Server against POODLE?<\/h2>

To test your server against POODLE, browse the following page:<\/p>

https:\/\/www.ssllabs.com\/ssltest\/<\/i><\/a><\/p>

Enter any website hosted on your server. This test will assess your server against potential security vulnerabilities and provide you with the full security report.<\/p>

If you find your WHM server vulnerable in this test, you are recommended to upgrade cPanel\/WHM version to 11.44.1.19 to address this vulnerability.<\/p>

What version of cPanel\/WHM I am running?<\/h2>

To determine your cPanel\/WHM version, just log into WHM as root and locate the version in the top right of the WHM interface.…..OR<\/p>

You can fire the following command in terminal:<\/p>

\/usr\/local\/cpanel\/cpanel -V<\/strong><\/pre>
<\/div>
In order to protect your WHM server against POODLE vulnerability, cPanel has recommended to upgrade the cPanel\/WHM software to version 11.44.1.19. cPanel<\/i><\/a> has released version (11.44.1.19) to disable SSLv3 on 22nd October 2014 .<\/p>
How do I upgrade cPanel\/WHM version?<\/h2>
In order to upgrade cPanel\/WHM version<\/i><\/a> through terminal, you just need to run following command as a root user:<\/p>
\/scripts\/upcp<\/strong><\/pre>
<\/div>
If you want to upgrade the cPanel\/WHM through WHM Control Panel, follow the below mentioned steps:<\/p>