OSVDB ID: 3945

Title: OpenSSL Vaudenay Timing Attack

Info

Disclosure
Feb 19, 2003

Discovery
May 02, 2002

Dates

Exploit
Feb 20, 2003

Solution
Unknown

Description

 OpenSSL versions 0.9.6h and prior and 0.9.7 contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when a repeated block of plaintext in multiple OpenSSL/TLS sessions occur. A crafted block of ciphertext can be repeatedly injected into each session, which will kill that session but may ultimately lead to the disclosure of the repeated plaintext block, resulting in a loss of confidentiality.

Classification

 Location: Local Access Required, Remote / Network Access
Attack Type: Cryptographic
Impact: Loss of Confidentiality
Exploit: Exploit Public
Disclosure: OSVDB Verified, Vendor Verified

Solution

 Upgrade to version 0.9.6i or 0.9.7a or higher, as they has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround(s): apply the vendor-supplied patch for versions 0.9.6e and later. Versions older than 0.9.6e must upgrade.

Products

OpenSSL Project

OpenSSL

 0.9.1x
0.9.2x
0.9.3x
0.9.4x
0.9.5x
0.9.6
0.9.6a
0.9.6b
0.9.6c
0.9.6d
0.9.6e
0.9.6f
0.9.6g
0.9.6h
0.9.7

References

Credit
  • Serge Vaudenay - serge.vaudenayepfl.ch - EPFL


Direct URL: http://osvdb.org/3945