[Xitami] FW: [SA11139] OpenSSL SSL/TLS Handshake Denial of Service Vulnerabilities

[Bowden, Zeb]

Anyone think Xitami Pro is vulnerable here?


-----Original Message-----
From: Secunia Security Advisories [mailto:sec-adv@secunia.com]=20
Sent: Wednesday, March 17, 2004 8:49 AM
To: Bowden, Zeb
Subject: [SA11139] OpenSSL SSL/TLS Handshake Denial of Service
Vulnerabilities


TITLE:
OpenSSL SSL/TLS Handshake Denial of Service Vulnerabilities

SECUNIA ADVISORY ID:
SA11139

VERIFY ADVISORY:
http://secunia.com/advisories/11139/

CRITICAL:
Moderately critical

IMPACT:
DoS

WHERE:
>From remote

SOFTWARE:
OpenSSL 0.9.x

DESCRIPTION:
Three vulnerabilities have been discovered in OpenSSL, which can be
exploited by malicious people to cause a DoS (Denial-of-Service).

1) A NULL-pointer assignment in the "do_change_cipher_spec()"
function used during the SSL/TLS handshake can be exploited to cause
OpenSSL to crash via a specially crafted SSL/TLS handshake.

This vulnerability affects all versions of OpenSSL 0.9.6c through
0.9.6k and 0.9.7a through 0.9.7c.

2) An unspecified error in a fix added to OpenSSL 0.9.6d some time
ago can result in a DoS caused by an infinite loop.

This vulnerability only affects older 0.9.6 versions with backported
security patches.

3) An out-of-bounds read error exists in a routine used during the
SSL/TLS handshake when using Kerberos ciphersuites. This can be
exploited to crash OpenSSL via a specially crafted SSL/TLS
handshake.

This vulnerability affects versions 0.9.7a, 0.9.7b, and 0.9.7c.

SOLUTION:
Update to version 0.9.7d or 0.9.6m. Recompile any OpenSSL
applications statically linked to OpenSSL libraries.

OpenSSL 0.9.7d:
ftp://ftp.openssl.org/source/openssl-0.9.7d.tar.gz
ftp://ftp.openssl.org/source/openssl-0.9.7d.tar.gz.asc

OpenSSL 0.9.6m:
ftp://ftp.openssl.org/source/openssl-0.9.6m.tar.gz
ftp://ftp.openssl.org/source/openssl-0.9.6m.tar.gz.asc

OpenSSL Engine 0.9.6m:
ftp://ftp.openssl.org/source/openssl-engine-0.9.6m.tar.gz
ftp://ftp.openssl.org/source/openssl-engine-0.9.6m.tar.gz.asc

PROVIDED AND/OR DISCOVERED BY:
1) Discovered by vendor using the Codenomicon TLS Test Tool.
2) Discovered by vendor using the Codenomicon TLS Test Tool.
3) Dr. Stephen Henson

ORIGINAL ADVISORY:
http://www.openssl.org/news/secadv_20040317.txt

OTHER REFERENCES:
NISCC:
http://www.uniras.gov.uk/vuls/2004/224012/index.htm

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=3Dzbowden@vt.edu

----------------------------------------------------------------------