title: How to Fix TLS CBC Incorrect Padding Abuse Vulnerability on Windows 2003 Server
body: <p>I am at a loss on this one, I have tried everything. We can not pass our PCI scan due to a couple of older Windows 2003 Servers with IIS.  The vulnerability reported is:</p>
  
  <p>"TLS CBC Incorrect Padding Abuse Vulnerability"</p>
  
  <p>This is the result from SSlLabs scanner:
  <img src="https://s3.postimg.org/rl4j0nper/cbc_1.png" alt="SSL Scan Results"></p>
  
  <p>We have disabled SSL 3.0:
  <img src="https://s27.postimg.org/8k5ndo06b/cbc_2.png" alt="Disabled SSL 3.0"></p>
  
  <p>And installed the hotfixes from MS from here:</p>
  
  <p>I don't know what else to do in order to disable the CBC chiper issues on Windows 2003. Does anybody know?</p>