SSLv2 DROWN Attack Alert

US-CERT Publish New SSL2 Alert
Network traffic encrypted using an RSA-based SSL certificate may be decrypted if enough SSLv2 handshake data can be collected. Exploitation of this vulnerability - referred to as DROWN in public reporting - may allow a remote attacker to obtain the private key of a server supporting SSLv2. US-CERT encourages users and administrators to review Vulnerability Note VU#583776 and the US-CERT OpenSSL Current Activity for additional information and mitigation details.

Accordingly to Drownattack Web Site about 33% of Worldwide websites  Vulnerable
Full Technical Paper available on here DROWN:BREAKING TLS using SSLv2