Vulnerabilities / Threats
9/20/2011
12:08 PM
50%
50%

HTTPS Vulnerable To Crypto Attack

Security researchers have built a tool that exploits weaknesses in the SSL and TLS encryption protocol, used by millions of websites to secure communications.

The secure sockets layer (SSL) and transport layer security (TLS) encryption protocol, used by millions of websites to secure Web communications via HTTPS, is vulnerable to being decrypted by attackers.

In particular, security researchers Juliano Rizzo and Thai Duong have built a tool that's capable of decrypting and obtaining the authentication tokens and cookies used in many websites' HTTPS requests. "Our exploit abuses a vulnerability present in the SSL/TLS implementation of major Web browsers at the time of writing," they said.

The duo plan to detail their findings, which they characterize as a "fast block-wise chosen-plaintext attack against SSL/TLS," on Friday at the Ekoparty Security Conference in Argentina. They said websites using SSL version 3 and TLS version 1.0 and earlier are vulnerable. Although newer versions of TLS are available--and apparently not vulnerable to this attack--most sites still use TLS 1.0.

[Do you have an effective cyber attack response strategy? See 7 Lessons: Surviving A Zero-Day Attack.]

To illustrate the vulnerability they've discovered and automatically harvest authentication tokens and cookies, the researchers said they've also built a JavaScript-based tool dubbed BEAST, for Browser Exploit Against SSL/TLS. "It is worth noting that the vulnerability that BEAST exploits has been [present] since the very first version of SSL. Most people in the crypto and security community have concluded that it is non-exploitable, that's why it has been largely ignored for many years," Duong told Threatpost.

The researchers plan use BEAST during their Ekoparty presentation to decrypt PayPal authentication cookies and access a PayPal account, according to the Register.

While full details of the vulnerability haven't been publicly disclosed, browser developers don't appear to be running scared. "The researchers disclosed BEAST to browsers so I'm not going to comment in detail until public," said Google Chrome engineer Adam Langley in a Twitter post. "It's neat, but not something to worry about." Opera, however, has already released a related patch, and the researchers said they expect other browser makers to follow suit.

The HTTPS vulnerability is likely to accelerate calls for an overhaul of today's fragile SSL ecosystem. Such calls have intensified after the July 2011 exploit--not revealed publicly until last month--of Dutch certificate authority DigiNotar. As a result of that exploit, attackers were able to issue false credentials for hundreds of legitimate websites, including Gmail and Windows Update.

Interestingly, Rizzo and Duong are no strangers to vulnerability research. Rizzo is one of the founders and designers behind open source network security tool platform Netifera, while Duong is chief security officer for a large Vietnamese bank, and has led Black Hat workshops detailing practical attacks against cryptography.

Last year, notably, the pair detailed a previously unknown "padding oracle attack" (referring not to Oracle, but rather a cryptographic concept) against ASP.NET Web applications that could be used to "decrypt cookies, view states, form authentication tickets, membership password, user data, and anything else encrypted using the framework's API," they said. Exploiting the vulnerability, present in 25% of ASP Web applications, could allow attackers to access information or even compromise systems.

The vulnerability stemmed from how Microsoft implemented AES in ASP.NET. Notably, if an attacker altered the encrypted data contained in a cookie, ASP.NET returned semi-detailed error messages. After amassing enough of these, an attacker could make an educated guess about the encryption key being used.

That vulnerability disclosure led Microsoft to issue an emergency patch.

Security professionals often view compliance as a burden, but it doesn't have to be that way. In this report, we show the security team how to partner with the compliance pros. Download the report here. (Free registration required.)

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
JuneSanchez
50%
50%
JuneSanchez,
User Rank: Apprentice
10/13/2011 | 1:46:55 AM
re: HTTPS Vulnerable To Crypto Attack
Is this similar to what Mike Ridpath from IOActive and Moxie spoke on at Blackhat or these new vulnerabilities? HTTPS is taking a beating!
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-6090
Published: 2015-04-27
Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) DataMappingEditorCommands, (2) DatastoreEditorCommands, and (3) IEGEditorCommands servlets in IBM Curam Social Program Management (SPM) 5.2 SP6 before EP6, 6.0 SP2 before EP26, 6.0.3 before 6.0.3.0 iFix8, 6.0.4 before 6.0.4.5 iFix...

CVE-2014-6092
Published: 2015-04-27
IBM Curam Social Program Management (SPM) 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.6 requires failed-login handling for web-service accounts to have the same lockout policy as for standard user accounts, which makes it easier for remote attackers to cause...

CVE-2015-0113
Published: 2015-04-27
The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team Concert 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Requirements Composer 4.0 through 4.0.7, Rational DOORS Next Generation...

CVE-2015-0176
Published: 2015-04-27
Cross-site scripting (XSS) vulnerability in MQ XR WebSockets Listener in WMQ Telemetry in IBM WebSphere MQ 8.0 before 8.0.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URI that is included in an error response.

CVE-2015-1886
Published: 2015-04-27
The Remote Document Conversion Service (DCS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF16, and 8.5.0 through CF05 allows remote attackers to cause a denial of service (memory consumption) via crafted requests.

Dark Reading Radio
Archived Dark Reading Radio
Join security and risk expert John Pironti and Dark Reading Editor-in-Chief Tim Wilson for a live online discussion of the sea-changing shift in security strategy and the many ways it is affecting IT and business.