Multiple SSL/TLS implementation could leak premaster-secret value
| ssl-premaster-information-leak (11586) |  Medium Risk |
Description:
OpenSSL could allow a remote attacker to obtain sensitive information. A remote attacker could use a modified David Bleichenbacher's ciphertext attack (Klima-Pokorny-Rosa attack), which requires the attacker to establish multiple SSL or TLS connections using the PKCS#1_1.5 public key encryption to cause OpenSSL to reveal information that could allow the attacker to obtain the "premaster-secret value", which is used to derive all session keys.
Consequences:
Obtain Information
Remedy:
For EnGarde Secure Linux 1.0.1:
Upgrade to the latest version of openssl (0.9.6-1.0.13 or later), as listed in EnGarde Secure Linux Security Advisory ESA-20010426-01. See References.
For EnGarde Secure Linux Community Edition:
Upgrade to the latest version of openssl (0.9.6-1.0.19 or later), as listed in EnGarde Secure Linux Security Advisory ESA-20030320-010. See References.
For OpenPKG:
Upgrade to the latest openssl package, as listed below. Refer to OpenPKG Security Advisory OpenPKG-SA-2003.026 for more information. See References.
OpenPKG CURRENT: 0.9.7a-20030320 or later
OpenPKG 1.2: 0.9.7-1.2.3 or later
OpenPKG 1.1: 0.9.6g-1.1.3 or later
For FreeBSD:
Upgrade to the latest version of FreeBSD (4-STABLE or the latest security branch dated later than 2003-02-20 or 2003-03-21), as listed in FreeBSD Security Advisory FreeBSD-SA-03:06.openssl. See References.
— OR —
Apply the appropriate patch for your system, as listed in FreeBSD Security Advisory FreeBSD-SA-03:06.openssl. See References.
For Mandrake Linux:
Upgrade to the latest openssl package, as listed below. Refer to MandrakeSoft Security Advisory MDKSA-2003:035: openssl for more information. See References.
Linux-Mandrake 7.2: 0.9.5a-9.5mdk or later
Mandrake Linux 8.0 (PPC): 0.9.6i-1.3mdk or later
Mandrake Linux 8.1 (IA64): 0.9.6i-1.4mdk
Mandrake Linux 8.2 (PPC): 0.9.6i-1.4mdk
Mandrake Linux 9.0: 0.9.6i-1.4mdk or later
Mandrake Linux 9.1 (PPC): 0.9.7a-1.1mdk or later
Single Network Firewall 7.2: 0.9.5a-9.5mdk or later
Multi Network Firewall 8.2: 0.9.6i-1.4mdk or later
Corporate Server 2.1: 0.9.6i-1.4mdk or later
For Immunix OS 6.2, 7.0, and 7+:
Upgrade to the latest version of openssl (0.9.6g-1_imnx_2 or later), as listed in Immunix OS Security Advisory IMNX-2003-7+-001-01. See References.
For Turbolinux:
Upgrade to the latest version of openssl (0.9.6i-4 or later), as listed in Turbolinux Security Advisory TLSA-2003-22. See References.
For Trustix Secure Linux 1.1, 1.2, and 1.5:
Upgrade to the latest version of openssl (openssl-0.9.6-14tr or later), as listed in Trustix Secure Linux Security Advisory #2003-0013. See References.
For Red Hat Linux:
Upgrade to the latest openssl package, as listed below. Refer to RHSA-2003:101-15 for more information. See References.
Red Hat 6.2: 0.9.5a-33 or later
Red Hat 7.0 and 7.1: 0.9.6-16 or later
Red Hat 7.2 and 7.3: 0.9.6b-32.7 or later
Red Hat 8.0: 0.9.6b-33 or later
Red Hat 9: 0.9.7a-5 or later
For SuSE Linux:
Upgrade to the latest openssl package, as listed below. Refer to SuSE Security Announcement SuSE-SA:2003:024 for more information. See References.
SuSE Linux 8.2 (Intel): 0.9.6i-12 or later
SuSE Linux 8.1: 0.9.6g-68 or later
SuSE Linux 8.0: 0.9.6c-85 or later
SuSE Linux 7.3: 0.9.6b-156 or later
SuSE Linux 7.2: 0.9.6a-82 or later
SuSE Linux 7.1 (Sparc): 0.9.6a-81 or later
SuSE Linux 7.3 (Sparc): 0.9.6b-89 or later
SuSE Linux 7.1 (AXP Alpha): 0.9.6a-31 or later
SuSE Linux 7.3 (PPC): 0.9.6b-150 or later
SuSE Linux 7.1 (PPC): 0.9.6a-31 or later
For Conectiva Linux:
Upgrade to the latest openssl package, as listed below. Refer to Conectiva Linux Security Announcement CLSA-2003:625 for more information. See References.
Conectiva Linux 6.0: 0.9.6-4U60_6cl or later
Conectiva Linux 7.0: 0.9.6a-3U70_6cl or later
Conectiva Linux 8: 0.9.6c-2U80_5cl or later
For Debian GNU/Linux:
Upgrade to the latest openssl package, as listed below. Refer to DSA-288-1 for more information. See References.
Debian GNU/Linux 2.2 (potato): 0.9.6c.potato.6 or later
Debian GNU/Linux 3.0 (woody): 0.9.6c-2.woody.3 or later
For SGI IRIX 6.5.19:
Upgrade to the latest version of IRIX (6.5.20 or later), when it becomes available, as listed in SGI Security Advisory 20030501-01-I. See References.
— OR —
Apply the appropriate patch for your system, as listed in SGI Security Advisory 20030501-01-I. See References.
For Oracle9i Database and Application Server, Oracle8i Database Server and Oracle HTTP Server:
Apply the appropriate patch for your system, as listed in Oracle Security Alert #62. See References.
For HP-UX releases 11.0, 11.11, and 11.22:
Download and install the latest HP Apache product, as listed in Hewlett-Packard Company Security Bulletin HPSBUX0304-0255. See References.
For other distributions:
Contact your vendor for upgrade or patch information.
References:
- BugTraq Mailing List, Wed Mar 19 2003 - 13:36:19 CST: OpenSSL Advisory] Klima-Pokorny-Rosa attack on PKCS #1 v1.5 padding.
- Conectiva Linux Security Announcement CLSA-2003:625: openssl.
- EnGarde Secure Linux Security Advisory ESA-20010426-01: There are four potential vulnerabilities in openssl.. (From LinuxSecurity archive)
- EnGarde Secure Linux Security Advisory ESA-20030320-010: Several vulnerabilities in the OpenSSL toolkit.. (From LinuxSecurity archive)
- ePrint Web site: Cryptology ePrint Archive: Report 2003/052.
- FreeBSD Security Advisory FreeBSD-SA-03:06.openssl: OpenSSL timing-based SSL/TLS attack.
- Immunix Secured OS Security Advisory IMNX-2003-7+-001-01: openssl, openssh, mod_ssl. (From LinuxSecurity archive)
- OpenSSL Security Advisory [19 March 2003]: Klima-Pokorny-Rosa attack on RSA in SSL/TLS.
- Oracle Security Alert #62: SSL Update for CERT CA200326 and older SSL issues.
- SGI Security Advisory 20030501-01-I: Multiple Security Vulnerabilities in OpenSSL.
- Trustix Secure Linux Security Advisory #2003-0013: openssl. (From LinuxSecurity archive)
- BID-7148: OpenSSL Bad Version Oracle Side Channel Attack Vulnerability
- CVE-2003-0131: The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padding that cause OpenSSL to leak information regarding the relationship between ciphertext and the associated plaintext, aka the Klima-Pokorny-Rosa attack.
- DSA-288: openssl -- several vulnerabilities
- MDKSA-2003:035: Updated openssl packages fix RSA-related insecurities
- OpenPKG-SA-2003.026: OpenSSL
- RHSA-2003-101: Updated OpenSSL packages fix vulnerabilities
- RHSA-2003-102: openssl security update
- RHSA-2003-205: Updated OpenSSL packages fix vulnerabilities
- SUSE-SA:2003:024: openssl: remote private-key retrieval
Platforms Affected:
- Conectiva Linux 6.0
- Conectiva Linux 7.0
- Conectiva Linux 8.0
- Debian Debian Linux 2.2
- Debian Debian Linux 3.0
- EngardeLinux Secure Community 1.0.1
- EngardeLinux Secure Linux
- EngardeLinux Secure Professional
- FreeBSD FreeBSD 4.6
- FreeBSD FreeBSD 4.7
- FreeBSD FreeBSD 5.0
- HP HP-UX 11.00
- HP HP-UX 11.11
- HP HP-UX 11.22
- Immunix Immunix OS 6.2
- Immunix Immunix OS 7+-beta
- Immunix Immunix OS 7.0
- MandrakeSoft Mandrake Linux 7.2
- MandrakeSoft Mandrake Linux 8.0 PPC
- MandrakeSoft Mandrake Linux 8.0
- MandrakeSoft Mandrake Linux 8.1
- MandrakeSoft Mandrake Linux 8.1 IA64
- MandrakeSoft Mandrake Linux 8.2
- MandrakeSoft Mandrake Linux 8.2 PPC
- MandrakeSoft Mandrake Linux 9.0
- MandrakeSoft Mandrake Linux 9.1 PPC
- MandrakeSoft Mandrake Linux 9.1
- MandrakeSoft Mandrake Linux Corporate Server 2.1
- MandrakeSoft Mandrake Multi Network Firewall 8.2
- MandrakeSoft Mandrake Single Network Firewall 7.2
- Novell SuSE Linux Enterprise Server 7.0
- Novell UnitedLinux 1.0
- OpenPKG OpenPKG 1.1
- OpenPKG OpenPKG 1.2
- OpenPKG OpenPKG CURRENT
- OpenSSL OpenSSL 0.9.6
- OpenSSL OpenSSL 0.9.6a
- OpenSSL OpenSSL 0.9.6b
- OpenSSL OpenSSL 0.9.6c
- OpenSSL OpenSSL 0.9.6d
- OpenSSL OpenSSL 0.9.6e
- OpenSSL OpenSSL 0.9.6g
- OpenSSL OpenSSL 0.9.6h
- OpenSSL OpenSSL 0.9.6i
- OpenSSL OpenSSL 0.9.7
- OpenSSL OpenSSL 0.9.7a
- Oracle Application Server 1.0.2.1s
- Oracle Application Server 1.0.2.2
- Oracle Application Server 9.0.2
- Oracle Application Server 9.0.3
- Oracle Database Server 8.1.7
- Oracle Database Server 9.0.1 R1
- Oracle Database Server 9.2.0 R2
- Oracle HTTP Server 8.1.7
- Oracle HTTP Server 9.0.1
- Oracle HTTP Server 9.2
- RedHat Enterprise Linux 2.1 WS
- RedHat Enterprise Linux 2.1 AS
- RedHat Enterprise Linux 2.1 ES
- RedHat Linux 6.2
- RedHat Linux 7
- RedHat Linux 7.1
- RedHat Linux 7.1 for iSeries
- RedHat Linux 7.1 for pSeries
- RedHat Linux 7.2
- RedHat Linux 7.3
- RedHat Linux 8.0
- RedHat Linux 9.0
- RedHat Linux Advanced Workstation 2.1 Itanium
- SGI IRIX 6.5.19
- SuSE Linux Enterprise Server 8
- SuSE SuSE eMail Server 3.1
- SuSE SuSE eMail Server III
- SUSE SuSE Linux 7.1
- SUSE SuSE Linux 7.2
- SUSE SuSE Linux 7.3
- SUSE SuSE Linux 8.0
- SUSE SuSE Linux 8.1
- SUSE SuSE Linux 8.2
- SuSE SuSE Linux Connectivity Server
- SuSE SuSE Linux Database Server
- SuSE SuSE Linux Firewall
- SuSE SuSE Linux Office Server
- Trustix Secure Linux 1.1
- Trustix Secure Linux 1.2
- Trustix Secure Linux 1.5
- Turbolinux Turbolinux 7 Server
- Turbolinux Turbolinux 7 Workstation
- Turbolinux Turbolinux 8 Server
- Turbolinux Turbolinux 8 Workstation
- Turbolinux Turbolinux Advanced Server 6
- Turbolinux Turbolinux Server 6.1
- Turbolinux Turbolinux Server 6.5
- Turbolinux Turbolinux Workstation 6.0
Reported:
Mar 19, 2003
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net