Vulnerabilities / Threats
9/20/2011
12:08 PM
50%
50%

HTTPS Vulnerable To Crypto Attack

Security researchers have built a tool that exploits weaknesses in the SSL and TLS encryption protocol, used by millions of websites to secure communications.

The secure sockets layer (SSL) and transport layer security (TLS) encryption protocol, used by millions of websites to secure Web communications via HTTPS, is vulnerable to being decrypted by attackers.

In particular, security researchers Juliano Rizzo and Thai Duong have built a tool that's capable of decrypting and obtaining the authentication tokens and cookies used in many websites' HTTPS requests. "Our exploit abuses a vulnerability present in the SSL/TLS implementation of major Web browsers at the time of writing," they said.

The duo plan to detail their findings, which they characterize as a "fast block-wise chosen-plaintext attack against SSL/TLS," on Friday at the Ekoparty Security Conference in Argentina. They said websites using SSL version 3 and TLS version 1.0 and earlier are vulnerable. Although newer versions of TLS are available--and apparently not vulnerable to this attack--most sites still use TLS 1.0.

[Do you have an effective cyber attack response strategy? See 7 Lessons: Surviving A Zero-Day Attack.]

To illustrate the vulnerability they've discovered and automatically harvest authentication tokens and cookies, the researchers said they've also built a JavaScript-based tool dubbed BEAST, for Browser Exploit Against SSL/TLS. "It is worth noting that the vulnerability that BEAST exploits has been [present] since the very first version of SSL. Most people in the crypto and security community have concluded that it is non-exploitable, that's why it has been largely ignored for many years," Duong told Threatpost.

The researchers plan use BEAST during their Ekoparty presentation to decrypt PayPal authentication cookies and access a PayPal account, according to the Register.

While full details of the vulnerability haven't been publicly disclosed, browser developers don't appear to be running scared. "The researchers disclosed BEAST to browsers so I'm not going to comment in detail until public," said Google Chrome engineer Adam Langley in a Twitter post. "It's neat, but not something to worry about." Opera, however, has already released a related patch, and the researchers said they expect other browser makers to follow suit.

The HTTPS vulnerability is likely to accelerate calls for an overhaul of today's fragile SSL ecosystem. Such calls have intensified after the July 2011 exploit--not revealed publicly until last month--of Dutch certificate authority DigiNotar. As a result of that exploit, attackers were able to issue false credentials for hundreds of legitimate websites, including Gmail and Windows Update.

Interestingly, Rizzo and Duong are no strangers to vulnerability research. Rizzo is one of the founders and designers behind open source network security tool platform Netifera, while Duong is chief security officer for a large Vietnamese bank, and has led Black Hat workshops detailing practical attacks against cryptography.

Last year, notably, the pair detailed a previously unknown "padding oracle attack" (referring not to Oracle, but rather a cryptographic concept) against ASP.NET Web applications that could be used to "decrypt cookies, view states, form authentication tickets, membership password, user data, and anything else encrypted using the framework's API," they said. Exploiting the vulnerability, present in 25% of ASP Web applications, could allow attackers to access information or even compromise systems.

The vulnerability stemmed from how Microsoft implemented AES in ASP.NET. Notably, if an attacker altered the encrypted data contained in a cookie, ASP.NET returned semi-detailed error messages. After amassing enough of these, an attacker could make an educated guess about the encryption key being used.

That vulnerability disclosure led Microsoft to issue an emergency patch.

Security professionals often view compliance as a burden, but it doesn't have to be that way. In this report, we show the security team how to partner with the compliance pros. Download the report here. (Free registration required.)

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
JuneSanchez
50%
50%
JuneSanchez,
User Rank: Apprentice
10/13/2011 | 1:46:55 AM
re: HTTPS Vulnerable To Crypto Attack
Is this similar to what Mike Ridpath from IOActive and Moxie spoke on at Blackhat or these new vulnerabilities? HTTPS is taking a beating!
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: Janice, I think I've got a message from the code father!
Current Issue
Security Operations and IT Operations: Finding the Path to Collaboration
A wide gulf has emerged between SOC and NOC teams that's keeping both of them from assuring the confidentiality, integrity, and availability of IT systems. Here's how experts think it should be bridged.
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.

Dark Reading Radio
Archived Dark Reading Radio
In past years, security researchers have discovered ways to hack cars, medical devices, automated teller machines, and many other targets. Dark Reading Executive Editor Kelly Jackson Higgins hosts researcher Samy Kamkar and Levi Gundert, vice president of threat intelligence at Recorded Future, to discuss some of 2016's most unusual and creative hacks by white hats, and what these new vulnerabilities might mean for the coming year.