vulnerability alert CVE-2009-3555

TLS, OpenSSL, GnuTLS: vulnerability of the renegotiation

Synthesis of the vulnerability

A remote attacker can use a vulnerability of TLS in order to insert plain text data during a renegotiation via a man-in-the-middle attack.

Severity: 2/4. Creation date: 10/11/2009.

Description of the vulnerability

Transport Layer Security (TLS) is a cryptographic protocol for network transport. When opening a connection using TLS, a negotiation mechanism allows the client and server to agree on the encryption algorithm to use. The protocol allows for renegotiation at any time during the connection. However, the handling of those renegotiations has a vulnerability. A remote attacker can therefore exploit this vulnerability in order to insert plain text data via a man-in-the-middle attack.

Complete Vigil@nce bulletin

Access to the complete Vigil@nce bulletin

Characteristics

Title: TLS, OpenSSL, GnuTLS: vulnerability of the renegotiation. Keywords: GnuTLS Layer OpenSSL Security TLS renegotiation vulnerability. Identifiers: 1021653, 111046, 273029, 273350, 274990, 6898371, 6898539, 6898546, 6899486, 6899619, 6900117, 977377, AID-020810, BID-36935, c01945686, c01963123, c02079216, cisco-sa-20091109-tls, CTX123359, CVE-2009-3555, DSA-1934-1, FEDORA-2009-12229, FEDORA-2009-12305, FEDORA-2009-12606, FEDORA-2009-12750, FEDORA-2009-12775, FEDORA-2009-12782, FEDORA-2009-12968, FEDORA-2009-13236, FEDORA-2009-13250, FEDORA-2010-1127, FEDORA-2010-3905, FEDORA-2010-3929, FEDORA-2010-3956, FEDORA-2010-5357, FEDORA-2010-8742, FEDORA-2010-9487, FEDORA-2010-9518, FreeBSD-SA-09:15.ssl, HPSBUX02482, HPSBUX02498, HPSBUX02517, MDVSA-2009:323, MDVSA-2009:337, MDVSA-2010:069, MDVSA-2010:076, MDVSA-2010:076-1, MDVSA-2010:089, NetBSD-SA2010-002, PM04482, PM04483, PM04534, PM04544, PM06400, RHSA-2009:1579-02, RHSA-2009:1580-02, RHSA-2010:0011-01, RHSA-2010:0119-01, RHSA-2010:0130-01, RHSA-2010:0155-01, RHSA-2010:0162-01, RHSA-2010:0163-01, RHSA-2010:0164-01, RHSA-2010:0165-01, RHSA-2010:0166-01, RHSA-2010:0167-01, SOL10737, SSA:2009-320-01, SSA:2010-067-01, SSRT090249, SSRT090264, SSRT100058, SUSE-SA:2009:057, SUSE-SA:2010:020, SUSE-SR:2010:008, SUSE-SR:2010:012, TLSA-2009-30, TLSA-2009-32, VIGILANCE-VUL-9181, VU#120541. Pointed by: VIGILANCE-VUL-9484, VIGILANCE-VUL-9549, VIGILANCE-VUL-9610, VIGILANCE-VUL-9677, VIGILANCE-VUL-9685, VIGILANCE-VUL-9760, VIGILANCE-VUL-9814, VIGILANCE-VUL-9824.

Information sources

Publications and announces Source example: PDF : Renegotiating TLS

Solutions for this vulnerability

Patch or workaround

Supplements

Proof of concept Exploit 0day or proof of concept

Computer vulnerabilities tracking service

The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system.
The Vigil@nce vulnerability database contains several thousand vulnerabilities.
This bulletin is published by the Vigil@nce team, which tracks computer vulnerabilities impacting systems and applications.
Computer vulnerability bulletins