|
| TC: | 12079 | |
| Description: | OpenSSL is a suite implementing the secure socket layer technology present in most webserver/browser configurations.. The data encryption technique employed by OpenSSL and described in RSA's PKCS standard has been found to be vulnerable to a form of adaptive ciphertext attack which may allow for the recovery and decryption of session keys from a captured session. By logging all packets transmitted between a client and a server a malicious attacker could make use of the captured session in order to launch a Bleichenbacher attack together with a simple timing attack with the aim of decrypting the session key. If successfully decrypted ,the session key can be used in the trivial decryption of the rest of the information being transmitted in the server client session. OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on the number of extra reductions during Montgomery reduction, and the use of different integer multiplication algorithms ("Karatsuba" and normal). | |
| TC Impact: | Gather Info | |
| Service: | http |
| Vulnerability Publication: | March, 14 2003 | |
| Advisory Copyright: | David Brumley; Dan Boneh; V. Klima; O. Pokorny; T. Rosa; | |
| Summary: | A remote attacker may be able to translate your session key and use it to decrypt all your ssl encrypted traffic. | |
| Risk: | Medium | |
| CVSS 2.0 metrics: | Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: None | |
| CVSS 2.0 Base Score: | 5.8 |
| Vulnerability Impact: |
Gather Info |
|---|
| Host Impact: | That a remote attacker may be able to decrypt all of your SSL encrypted traffic. | |
| Nature of Remediation: | Update the software. |
| Step required to fix the reported vulnerability: | |
***** Solution type: Upgrade Software ***** Upgrade the software to a version greater than 0.9.7a. See references for more details. |
| CVE Link: |
CVE-2003-0131 CVE-2003-0147 |
 |
|---|
| Glossary: |
Banner Password Password Cracking SSL Weak Encryption |
|---|
