PGP SIGNED MESSAGE-----
CA-2002-23 Multiple Vulnerabilities In OpenSSL
release date: July 30, 2002
Last revised: --
revision history can be found at the end of this file.
prior to 0.9.6e, up to and including pre-release
* OpenSSL pre-release 0.9.7-beta2 and prior with Kerberos enabled
* SSLeay library
are four remotely exploitable buffer overflows in OpenSSL. There
are also encoding problems in the ASN.1 library used by OpenSSL.
Several of these vulnerabilities could be used by a remote attacker
execute arbitrary code on the target system. All could be used to
create denial of service.
is a widely deployed, open source implementation of the Secure
Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1)
protocols as well as a full-strength general purpose cryptography
library. The SSL and TLS protocols are used to provide a secure
connection between a client and a server for higher level protocols
such as HTTP. Four remotely exploitable vulnerabilities exist in many
OpenSSL client and server systems.
- OpenSSL servers contain a buffer overflow during the SSLv2
of OpenSSL servers prior to 0.9.6e and pre-release version
0.9.7-beta2 contain a remotely exploitable buffer overflow
vulnerability. This vulnerability can be exploited by a client
using a malformed key during the handshake process with an SSL
server connection. Note that only SSLv2-supported sessions are
affected by this issue.
is also being referenced as CAN-2002-0656.
- OpenSSL clients contain a buffer overflow during the SSLv3
clients using SSLv3 prior to version 0.9.6e and pre-release
version 0.9.7-beta2 contain a buffer overflow vulnerability. A
malicious server can exploit this by sending a large session ID to
the client during the handshake process.
is also being referenced as CAN-2002-0656.
- OpenSSL servers with Kerberos enabled contain a remotely
exploitable buffer overflow vulnerability during the SSLv3 handshake
running OpenSSL pre-release version 0.9.7 with Kerberos
enabled contain a remotely exploitable buffer overflow
vulnerability. This vulnerability can be exploited by a malicious
client sending a malformed key during the SSLv3 handshake process
with the server.
is also being referenced as CAN-2002-0657.
- OpenSSL contains multiple buffers overflows in buffers
that are used to hold ASCII representations of integers
clients and servers prior to version 0.9.6e and pre-release
version 0.9.7-beta2 contain multiple remotely exploitable buffer
overflow vulnerabilities if running on 64-bit platforms. These
buffers are used to hold ASCII representations of integers.
is also being referenced as CAN-2002-0655.
a separate issue has been identified in OpenSSL involving
malformed ASN.1 encodings. Affected components include SSL or TLS
applications, as well as S/MIME, PKCS#7, and certificate creation
- ASN.1 encoding errors exist in implementations of SSL,
TLS, S/MIME, PKCS#7 routines
library used by OpenSSL has various encoding errors that
allow malformed certificate encodings to be parsed incorrectly.
Exploitation of this vulnerability can lead to remote
denial-of-service issues. Routines affected include those
supporting SSL and TLS applications, as well as those supporting
S/MIME, PKCS#7, and certificate creation.
is also being referenced as CAN-2002-0659.
these vulnerabilities affect OpenSSL, other implementations
of the SSL protocol that use or share a common code base may be
affected. This includes implementations that are derived from the
SSLeay library developed by Eric A. Young and Tim J. Hudson.
in the OpenSSL advisory as well, sites running OpenSSL 0.9.6d
servers on 32-bit platforms with SSLv2 handshaking disabled will not
be affected by any of the buffer overflows described above. However,
due to the nature of the ASN.1 encoding errors, such sites may still
be affected by denial-of-service situations.
the buffer overflows above, a remote attacker can
execute arbitrary code on a vulnerable server or client system or
cause a denial-of-service situation. Exploitation of the ASN.1
encoding errors can lead to a denial of service.
patch from your vendor
A contains information provided by vendors for this advisory.
As vendors report new information to the CERT/CC, we will update this
section and note the changes in our revision history. If a particular
vendor is not listed below or in the individual vulnerability notes,
we have not received their comments. Please contact your vendor
to version 0.9.6e of OpenSSL
to version 0.9.6e of OpenSSL to resolve the issues addressed
in this advisory. As noted in the OpenSSL advisory, separate patches
patches for OpenSSL 0.9.6d:
either applying the patches above or upgrading to 0.9.6e,
recompile all applications using OpenSSL to support SSL or TLS
services, and restart said services or systems. This will eliminate
all known vulnerable code.
running OpenSSL pre-release version 0.9.7-beta2 may wish to
upgrade to 0.9.7-beta3, which corrects these vulnerabilities. Separate
patches are available as well:
patches for OpenSSL 0.9.7 beta 2:
vulnerable applications or services
fixes for these vulnerabilities can be applied, disable all
applications that use vulnerable implementations of OpenSSL. Systems
with OpenSSL 0.9.7 pre-release with Kerberos enabled also need to
disable Kerberos to protect against VU#561275. As a best practice, the
CERT/CC recommends disabling all services that are not explicitly
required. Before deciding to disable SSL or TLS, carefully consider
the impact that this will have on your service requirements.
SSLv2 handshaking will prevent exploitation of VU#102795.
However, due to the nature of the ASN.1 encoding errors, such sites
would still be vulnerable to denial-of-service attacks.
A. - Vendor Information
contains information provided by vendors for this
advisory. As vendors report new information to the CERT/CC, we will
update this section and note the changes in our revision history. If
particular vendor is not listed below or in the individual
vulnerability notes, we have not received their comments.
Project uses OpenSSL. Rebuilding OpenLDAP with updated
versions of OpenSSL should adequately address reported issues.
Those using packaged versions of OpenLDAP should contact the
package distributor for update information.
distributes affected versions of OpenSSL in all Red Hat
Linux distributions as well as the Stronghold web server. Red Hat
Linux errata packages that fix the above vulnerabilities
(CAN-2002-0655 and CAN-2002-0656) are available from the URL below.
Users of the Red Hat Network are able to update their systems using
the 'up2date' tool. A future update will fix the potential remote
DOS in the ASN.1 encoding (CAN-2002-0659)
vulnerabilities were discovered and reported by the following:
* VU#102795 - discovered by A.L. Digital Ltd and independently
discovered and reported by John McDonald of Neohapsis
* VU#258555, VU#561275, VU#308891 - discovered by A.L. Digital Ltd
* VU#748355 - discovered by Adi Stav and James Yonan independently
thanks the OpenSSL team for the work they put into their
advisory, on which this document is largely based.
can be directed to the authors: Jason A. Rafail, Cory F.
Cohen, Jeffrey S. Havrilla, Shawn V. Hernan.
is available from:
Phone: +1 412-268-7090 (24-hour hotline)
Fax: +1 412-268-6989
CERT Coordination Center
Software Engineering Institute
Carnegie Mellon University
Pittsburgh PA 15213-3890
personnel answer the hotline 08:00-17:00 EST(GMT-5) /
EDT(GMT-4) Monday through Friday; they are on call for emergencies
during other hours, on U.S. holidays, and on weekends.
urge you to encrypt sensitive information sent by email.
Our public PGP key is available from
prefer to use DES, please call the CERT hotline for more
and other security information are available from
our web site
to the CERT mailing list for advisories and bulletins,
send email to firstname.lastname@example.org. Please include in the body of your
and "CERT Coordination Center" are registered in the U.S.
Patent and Trademark Office.
Any material furnished by Carnegie Mellon University and the Software
Engineering Institute is furnished on an "as is" basis. Carnegie
Mellon University makes no warranties of any kind, either expressed
implied as to any matter including, but not limited to, warranty of
fitness for a particular purpose or merchantability, exclusivity or
results obtained from use of the material. Carnegie Mellon University
does not make any warranty of any kind with respect to freedom from
patent, trademark, or copyright infringement.
for use, disclaimers, and sponsorship information
2002 Carnegie Mellon University.
July 30, 2002: Initial release
Version: PGP 6.5.8
-----END PGP SIGNATURE-----