Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass (Red Hat Red Hat Enterprise Linux 3)
At a glance
- Source
- NVD
- EPSS
- EPSS 3.95 % · percentile 90 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- redhat
- NVD status
- Modified
Description
A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.509 and other certificates, leading to a bypass of trust and authentication mechanisms.
Weaknesses (CWE)
References
- http://dev2dev.bea.com/pub/advisory/238
- http://docs.info.apple.com/article.html?artnum=304829
- http://docs.info.apple.com/article.html?artnum=307177
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771
- http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540
- http://jvn.jp/en/jp/JVN51615542/index.html
- http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html
- http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html
- http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html
- http://lists.vmware.com/pipermail/security-announce/2008/000008.html
- http://marc.info/?l=bind-announce&m=116253119512445&w=2
- http://marc.info/?l=bugtraq&m=130497311408250&w=2
- http://openvpn.net/changelog.html
- http://secunia.com/advisories/21709
- http://secunia.com/advisories/21767
- http://secunia.com/advisories/21776
- http://secunia.com/advisories/21778
- http://secunia.com/advisories/21785
- http://secunia.com/advisories/21791
- http://secunia.com/advisories/21812
- http://secunia.com/advisories/21823
- http://secunia.com/advisories/21846
- http://secunia.com/advisories/21852
- http://secunia.com/advisories/21870
- http://secunia.com/advisories/21873
- http://secunia.com/advisories/21906
- http://secunia.com/advisories/21927
- http://secunia.com/advisories/21930
- http://secunia.com/advisories/21982
- http://secunia.com/advisories/22036
- http://secunia.com/advisories/22044
- http://secunia.com/advisories/22066
- http://secunia.com/advisories/22161
- http://secunia.com/advisories/22226
- http://secunia.com/advisories/22232
- http://secunia.com/advisories/22259
- http://secunia.com/advisories/22260
- http://secunia.com/advisories/22284
- http://secunia.com/advisories/22325
- http://secunia.com/advisories/22446
- http://secunia.com/advisories/22509
- http://secunia.com/advisories/22513
- http://secunia.com/advisories/22523
- http://secunia.com/advisories/22545
- http://secunia.com/advisories/22585
- http://secunia.com/advisories/22671
- http://secunia.com/advisories/22689
- http://secunia.com/advisories/22711
- http://secunia.com/advisories/22733
- +150 more
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | CRITICAL 9.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N | redhat |
| CVSS 3.1 | CRITICAL 9.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N | NVD · secalert@redhat.com (Primary) |
| CVSS 2.0 | MEDIUM 4.3 | AV:N/AC:M/Au:N/C:P/I:N/A:N | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2006-4327
- GCVE · GCVE-0-2006-4339
CERT-FR advisories
- CERTA-2010-AVI-080 — Multiples vulnérabilités dans OpenOffice · cert.ssi.gouv.fr
- CERTA-2008-AVI-141 — Vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTA-2007-AVI-546 — Multiples vulnérabilités dans Apple Mac OS X · cert.ssi.gouv.fr
- CERTA-2007-AVI-051 — Vulnérabilités dans Apache sur HP-UX · cert.ssi.gouv.fr
- CERTA-2007-AVI-026 — Multiples vulnérabilités dans VMware · cert.ssi.gouv.fr
- CERTA-2006-AVI-517 — Multiples vulnérabilités dans Apple Mac OS X · cert.ssi.gouv.fr
- CERTA-2006-AVI-391 — Multiples vulnérabilités dans les produits Mozilla · cert.ssi.gouv.fr
- CERTA-2006-AVI-384 — Vulnérabilité dans OpenSSL · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*≤ 0.9.7cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*- +5 more
Affected products
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |