An Evening with Berferd: In Which a Cracker is Lured, Endured, and Studied (1992)
Summary
Sébastien Féry documents three TLS-related vulnerabilities in the GoAhead embedded web server (CRL enforcement, DH parameter truncation, and LibreSSL legacy verifier depth handling) affecting a wide range of devices. The article maps each issue to CVSS-like severity, lists affected backends and versions, and provides remediation guidance, including a fix in 6.1.1 and configuration changes. It also includes PoC details and fingerprinting information for detection.