Vulnerabilities / Threats
7/30/2010
03:43 PM
Connect Directly
Google+
Twitter
RSS
E-Mail
50%
50%

Most SSL Sites Poorly Configured

Half of all SSL servers run older, insecure version of SSL; attacks against HTTPS browser sessions detailed at Black Hat

BLACK HAT USA -- Las Vegas -- The good news about SSL-based websites: Most are running strong encryption. The bad news: More than 60 percent aren't properly configured.

Click here for more of Dark Reading's Black Hat articles.

Researcher Ivan Ristic, who is director of engineering, Web application firewall, and SSL at Qualys, revealed findings here yesterday from a study he conducted of some 120 million registered domain names. Ristic found that 20 million of them support SSL, but only 720,000 of these have potentially valid SSL certificates. "That's a very small percentage, but it doesn't really mean anything apart from that a fraction of sites use SSL, which we've known," Ristic say.

Of the more telling findings was that of all the SSL sites, half use SSLv2, an older version of SSL, which is known to be insecure. Only 38 percent of all SSL sites are actually configured well, Ristic says, and 32 percent contain a previously exposed renegotiation vulnerability in the protocol.

Meanwhile, researchers Robert "RSnake" Hansen and Josh Sokol here yesterday detailed some 24 exploitation techniques possible against HTTPS/SSL for browsers that leverage man-in-the-middle (MITM) attacks. Among them: cookie poisoning and injecting malicious content into browser tabs. The researchers warned that HTTPS can't guarantee confidentiality and integrity in the browser.

"The sky is not falling ... but SSL is pretty frail right now," Hansen said in the presentation. "There needs to be proper tab isolation, cookie sandboxing, and proper padding and jitter, and a lot of this goes away," however, he says. Hansen recommends using a separate browser for sensitive browsing.

Ristic, meanwhile, says while the state of SSL websites is "average" in terms of security, SSL is rarely targeted by attackers today. "I have a disclaimer: SSL is not a common attack vector today because there's so much low-hanging fruit out there. I think it's the time to start fixing things, and they can be fixed."

Two-thirds of the SSL sites use default settings, which leave them open to attack. "To fix this, you have to raise awareness and reach end users or talk to the vendors and see if they can make the defaults better, which is probably the more feasible [solution]," Ristic says. Leaving default support for insecure protocols, for example, in SSL servers is one common mistake.

"To configure an SSL server well is a 15-minute job. You choose the key size for the cert, disable the insecure protocols, and disable the insecure ciphers."

And while the insecure SSLv2, which is susceptible to MITMattacks, has been disabled in most major browsers, Ristic says, it's still running many SSL websites. "The saddest thing was that more than half of all of them support SSL2. We've known that to be insecure for years."

There was little or no support in the more secure TLS 1.1 and 1.2 protocols in the SSL websites, he found.

But most SSL websites use strong encryption -- 128-bit and higher, the study found. Overall, Ristic says only 38.4 percent of SSL websites got an "A" for their security and configuration, while 61.46 percent got a B or lower. Ristic plans to go public with all of the data from the survey, and to run the survey on an annual basis.

Jeff Moss, founder of Black Hat, during the keynote here called SSL "broken" and said while some security problems have been addressed, it still has a ways to go.

Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.

Kelly Jackson Higgins is Executive Editor at DarkReading.com. She is an award-winning veteran technology and business journalist with more than two decades of experience in reporting and editing for various publications, including Network Computing, Secure Enterprise ... View Full Bio

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
Partner Perspectives
What's This?
In a digital world inundated with advanced security threats, Intel Security seeks to transform how we live and work to keep our information secure. Through hardware and software development, Intel Security delivers robust solutions that integrate security into every layer of every digital device. In combining the security expertise of McAfee with the innovation, performance, and trust of Intel, this vision becomes a reality.

As we rely on technology to enhance our everyday and business life, we must too consider the security of the intellectual property and confidential data that is housed on these devices. As we increase the number of devices we use, we increase the number of gateways and opportunity for security threats. Intel Security takes the “security connected” approach to ensure that every device is secure, and that all security solutions are seamlessly integrated.
Featured Writers
White Papers
Cartoon
Current Issue
Dark Reading's October Tech Digest
Fast data analysis can stymie attacks and strengthen enterprise security. Does your team have the data smarts?
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-3409
Published: 2014-10-25
The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (device reload) via malformed CFM packets, aka Bug ID CSCuq93406.

CVE-2014-4620
Published: 2014-10-25
The EMC NetWorker Module for MEDITECH (aka NMMEDI) 3.0 build 87 through 90, when EMC RecoverPoint and Plink are used, stores cleartext RecoverPoint Appliance credentials in nsrmedisv.raw log files, which allows local users to obtain sensitive information by reading these files.

CVE-2014-4623
Published: 2014-10-25
EMC Avamar 6.0.x, 6.1.x, and 7.0.x in Avamar Data Store (ADS) GEN4(S) and Avamar Virtual Edition (AVE), when Password Hardening before 2.0.0.4 is enabled, uses UNIX DES crypt for password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force a...

CVE-2014-4624
Published: 2014-10-25
EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x through 7.0.2-43 do not require authentication for Java API calls, which allows remote attackers to discover grid MCUser and GSAN passwords via a crafted call.

CVE-2014-6151
Published: 2014-10-25
CRLF injection vulnerability in IBM Tivoli Integrated Portal (TIP) 2.2.x allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Follow Dark Reading editors into the field as they talk with noted experts from the security world.