iDescription: According to a vendor security advisory [0], a potential SSL 2.0 protocol rollback attack vulnerability exists in the cryptography toolkit OpenSSL [1]. The vulnerability potentially affects applications that use the SSL/TLS server implementation provided by OpenSSL. Such applications are affected if they use the option “SSL_OP_MSIE_SSLV2_RSA_PADDING”.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40859/OpenPKG-SA-2005.022.txt
Source: https://packetstormsecurity.com/files/40859/OpenPKG-Security-Advisory-2005.22.html