New SSL 3.0 vulnerability