Multiple SSL/TLS implementation could leak premaster-secret value
| ssl-premaster-information-leak (11586) |  Medium Risk |
Description:
OpenSSL could allow a remote attacker to obtain sensitive information. A remote attacker could use a modified David Bleichenbacher's ciphertext attack (Klima-Pokorny-Rosa attack), which requires the attacker to establish multiple SSL or TLS connections using the PKCS#1_1.5 public key encryption to cause OpenSSL to reveal information that could allow the attacker to obtain the "premaster-secret value", which is used to derive all session keys.
Platforms Affected:
- Conectiva, Linux 6.0
- Conectiva, Linux 7.0
- Conectiva, Linux 8.0
- Debian, Debian Linux 2.2
- Debian, Debian Linux 3.0
- EngardeLinux, Secure Community 1.0.1
- EngardeLinux, Secure Linux
- EngardeLinux, Secure Professional
- FreeBSD, FreeBSD 4.6
- FreeBSD, FreeBSD 4.7
- FreeBSD, FreeBSD 5.0
- HP, HP-UX 11.00
- HP, HP-UX 11.11
- HP, HP-UX 11.22
- Immunix, Immunix OS 6.2
- Immunix, Immunix OS 7+-beta
- Immunix, Immunix OS 7.0
- MandrakeSoft, Mandrake Linux 7.2
- MandrakeSoft, Mandrake Linux 8.0 PPC
- MandrakeSoft, Mandrake Linux 8.0
- MandrakeSoft, Mandrake Linux 8.1 IA64
- MandrakeSoft, Mandrake Linux 8.1
- MandrakeSoft, Mandrake Linux 8.2 PPC
- MandrakeSoft, Mandrake Linux 8.2
- MandrakeSoft, Mandrake Linux 9.0
- MandrakeSoft, Mandrake Linux 9.1 PPC
- MandrakeSoft, Mandrake Linux 9.1
- MandrakeSoft, Mandrake Linux Corporate Server 2.1
- MandrakeSoft, Mandrake Multi Network Firewall 8.2
- MandrakeSoft, Mandrake Single Network Firewall 7.2
- Novell, UnitedLinux 1.0
- OpenPKG, OpenPKG 1.1
- OpenPKG, OpenPKG 1.2
- OpenPKG, OpenPKG CURRENT
- OpenSSL, OpenSSL 0.9.6
- OpenSSL, OpenSSL 0.9.6a
- OpenSSL, OpenSSL 0.9.6b
- OpenSSL, OpenSSL 0.9.6c
- OpenSSL, OpenSSL 0.9.6d
- OpenSSL, OpenSSL 0.9.6e
- OpenSSL, OpenSSL 0.9.6g
- OpenSSL, OpenSSL 0.9.6h
- OpenSSL, OpenSSL 0.9.6i
- OpenSSL, OpenSSL 0.9.7
- OpenSSL, OpenSSL 0.9.7a
- Oracle, Application Server 1.0.2.1s
- Oracle, Application Server 1.0.2.2
- Oracle, Application Server 9.0.2
- Oracle, Application Server 9.0.3
- Oracle, Database Server 8.1.7
- Oracle, Database Server 9.0.1 R1
- Oracle, Database Server 9.2.0 R2
- Oracle, HTTP Server 8.1.7
- Oracle, HTTP Server 9.0.1
- Oracle, HTTP Server 9.2
- RedHat, Enterprise Linux 2.1 WS
- RedHat, Enterprise Linux 2.1 AS
- RedHat, Enterprise Linux 2.1 ES
- RedHat, Linux 6.2
- RedHat, Linux 7
- RedHat, Linux 7.1
- RedHat, Linux 7.1 for iSeries
- RedHat, Linux 7.1 for pSeries
- RedHat, Linux 7.2
- RedHat, Linux 7.3
- RedHat, Linux 8.0
- RedHat, Linux 9.0
- RedHat, Linux Advanced Workstation 2.1 Itanium
- SGI, IRIX 6.5.19
- SuSE, Linux Enterprise Server 8
- SuSE, SuSE eMail Server 3.1
- SuSE, SuSE eMail Server III
- SuSE, SuSE Linux 7.1
- SuSE, SuSE Linux 7.2
- SuSE, SuSE Linux 7.3
- SuSE, SuSE Linux 8.0
- SuSE, SuSE Linux 8.1
- SuSE, SuSE Linux 8.2
- SuSE, SuSE Linux Connectivity Server
- SuSE, SuSE Linux Database Server
- SuSE, SuSE Linux Enterprise Server 7.0
- SuSE, SuSE Linux Firewall
- SuSE, SuSE Linux Office Server
- Trustix, Secure Linux 1.1
- Trustix, Secure Linux 1.2
- Trustix, Secure Linux 1.5
- Turbolinux, Turbolinux 7 Server
- Turbolinux, Turbolinux 7 Workstation
- Turbolinux, Turbolinux 8 Server
- Turbolinux, Turbolinux 8 Workstation
- Turbolinux, Turbolinux Advanced Server 6
- Turbolinux, Turbolinux Server 6.1
- Turbolinux, Turbolinux Server 6.5
- Turbolinux, Turbolinux Workstation 6.0
Remedy:
For EnGarde Secure Linux 1.0.1:
Upgrade to the latest version of openssl (0.9.6-1.0.13 or later), as listed in EnGarde Secure Linux Security Advisory ESA-20010426-01. See References.
For EnGarde Secure Linux Community Edition:
Upgrade to the latest version of openssl (0.9.6-1.0.19 or later), as listed in EnGarde Secure Linux Security Advisory ESA-20030320-010. See References.
For OpenPKG:
Upgrade to the latest openssl package, as listed below. Refer to OpenPKG Security Advisory OpenPKG-SA-2003.026 for more information. See References.
OpenPKG CURRENT: 0.9.7a-20030320 or later
OpenPKG 1.2: 0.9.7-1.2.3 or later
OpenPKG 1.1: 0.9.6g-1.1.3 or later
For FreeBSD:
Upgrade to the latest version of FreeBSD (4-STABLE or the latest security branch dated later than 2003-02-20 or 2003-03-21), as listed in FreeBSD Security Advisory FreeBSD-SA-03:06.openssl. See References.
— OR —
Apply the appropriate patch for your system, as listed in FreeBSD Security Advisory FreeBSD-SA-03:06.openssl. See References.
For Mandrake Linux:
Upgrade to the latest openssl package, as listed below. Refer to MandrakeSoft Security Advisory MDKSA-2003:035: openssl for more information. See References.
Linux-Mandrake 7.2: 0.9.5a-9.5mdk or later
Mandrake Linux 8.0 (PPC): 0.9.6i-1.3mdk or later
Mandrake Linux 8.1 (IA64): 0.9.6i-1.4mdk
Mandrake Linux 8.2 (PPC): 0.9.6i-1.4mdk
Mandrake Linux 9.0: 0.9.6i-1.4mdk or later
Mandrake Linux 9.1 (PPC): 0.9.7a-1.1mdk or later
Single Network Firewall 7.2: 0.9.5a-9.5mdk or later
Multi Network Firewall 8.2: 0.9.6i-1.4mdk or later
Corporate Server 2.1: 0.9.6i-1.4mdk or later
For Immunix OS 6.2, 7.0, and 7+:
Upgrade to the latest version of openssl (0.9.6g-1_imnx_2 or later), as listed in Immunix OS Security Advisory IMNX-2003-7+-001-01. See References.
For Turbolinux:
Upgrade to the latest version of openssl (0.9.6i-4 or later), as listed in Turbolinux Security Advisory TLSA-2003-22. See References.
For Trustix Secure Linux 1.1, 1.2, and 1.5:
Upgrade to the latest version of openssl (openssl-0.9.6-14tr or later), as listed in Trustix Secure Linux Security Advisory #2003-0013. See References.
For Red Hat Linux:
Upgrade to the latest openssl package, as listed below. Refer to RHSA-2003:101-15 for more information. See References.
Red Hat 6.2: 0.9.5a-33 or later
Red Hat 7.0 and 7.1: 0.9.6-16 or later
Red Hat 7.2 and 7.3: 0.9.6b-32.7 or later
Red Hat 8.0: 0.9.6b-33 or later
Red Hat 9: 0.9.7a-5 or later
For SuSE Linux:
Upgrade to the latest openssl package, as listed below. Refer to SuSE Security Announcement SuSE-SA:2003:024 for more information. See References.
SuSE Linux 8.2 (Intel): 0.9.6i-12 or later
SuSE Linux 8.1: 0.9.6g-68 or later
SuSE Linux 8.0: 0.9.6c-85 or later
SuSE Linux 7.3: 0.9.6b-156 or later
SuSE Linux 7.2: 0.9.6a-82 or later
SuSE Linux 7.1 (Sparc): 0.9.6a-81 or later
SuSE Linux 7.3 (Sparc): 0.9.6b-89 or later
SuSE Linux 7.1 (AXP Alpha): 0.9.6a-31 or later
SuSE Linux 7.3 (PPC): 0.9.6b-150 or later
SuSE Linux 7.1 (PPC): 0.9.6a-31 or later
For Conectiva Linux:
Upgrade to the latest openssl package, as listed below. Refer to Conectiva Linux Security Announcement CLSA-2003:625 for more information. See References.
Conectiva Linux 6.0: 0.9.6-4U60_6cl or later
Conectiva Linux 7.0: 0.9.6a-3U70_6cl or later
Conectiva Linux 8: 0.9.6c-2U80_5cl or later
For Debian GNU/Linux:
Upgrade to the latest openssl package, as listed below. Refer to DSA-288-1 for more information. See References.
Debian GNU/Linux 2.2 (potato): 0.9.6c.potato.6 or later
Debian GNU/Linux 3.0 (woody): 0.9.6c-2.woody.3 or later
For SGI IRIX 6.5.19:
Upgrade to the latest version of IRIX (6.5.20 or later), when it becomes available, as listed in SGI Security Advisory 20030501-01-I. See References.
— OR —
Apply the appropriate patch for your system, as listed in SGI Security Advisory 20030501-01-I. See References.
For Oracle9i Database and Application Server, Oracle8i Database Server and Oracle HTTP Server:
Apply the appropriate patch for your system, as listed in Oracle Security Alert #62. See References.
For HP-UX releases 11.0, 11.11, and 11.22:
Download and install the latest HP Apache product, as listed in Hewlett-Packard Company Security Bulletin HPSBUX0304-0255. See References.
For other distributions:
Contact your vendor for upgrade or patch information.
Consequences:
Obtain Information
References:
- BugTraq Mailing List, Wed Mar 19 2003 - 13:36:19 CST, OpenSSL Advisory] Klima-Pokorny-Rosa attack on PKCS #1 v1.5 padding at http://archives.neohapsis.com/archives/bugtraq/2003-03/0285.html.
- Conectiva Linux Security Announcement CLSA-2003:625, openssl at http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000625.
- EnGarde Secure Linux Security Advisory ESA-20010426-01, There are four potential vulnerabilities in openssl. at http://www.linuxsecurity.com/advisories/other_advisory-1338.html. (From LinuxSecurity archive)
- EnGarde Secure Linux Security Advisory ESA-20030320-010, Several vulnerabilities in the OpenSSL toolkit. at http://www.linuxsecurity.com/advisories/engarde_advisory-3009.html. (From LinuxSecurity archive)
- ePrint Web site, Cryptology ePrint Archive: Report 2003/052 at http://eprint.iacr.org/2003/052/.
- FreeBSD Security Advisory FreeBSD-SA-03:06.openssl, OpenSSL timing-based SSL/TLS attack at ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:06.openssl.asc.
- Immunix Secured OS Security Advisory IMNX-2003-7+-001-01, openssl, openssh, mod_ssl at http://www.linuxsecurity.com/content/view/104811/105/. (From LinuxSecurity archive)
- OpenSSL Security Advisory [19 March 2003], Klima-Pokorny-Rosa attack on RSA in SSL/TLS at http://www.openssl.org/news/secadv_20030319.txt.
- Oracle Security Alert #62, SSL Update for CERT CA200326 and older SSL issues at http://otn.oracle.com/deploy/security/pdf/2003alert62.pdf.
- SGI Security Advisory 20030501-01-I, Multiple Security Vulnerabilities in OpenSSL at ftp://patches.sgi.com/support/free/security/advisories/20030501-01-I.
- Trustix Secure Linux Security Advisory #2003-0013, openssl at http://www.linuxsecurity.com/content/view/104819/109/. (From LinuxSecurity archive)
- BID-7148: OpenSSL Bad Version Oracle Side Channel Attack Vulnerability
- CVE-2003-0131: The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padding that cause OpenSSL to leak information regarding the relationship between ciphertext and the associated plaintext, aka the Klima-Pokorny-Rosa attack.
- DSA-288: openssl -- several vulnerabilities
- MDKSA-2003:035: Updated openssl packages fix RSA-related insecurities
- OpenPKG-SA-2003.026: OpenSSL
- RHSA-2003-101: Updated OpenSSL packages fix vulnerabilities
- RHSA-2003-102: openssl security update
- RHSA-2003-205: Updated OpenSSL packages fix vulnerabilities
- SUSE-SA:2003:024: openssl: remote private-key retrieval
Reported:
Mar 19, 2003
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net