Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Vulnerabilities / Threats

11/5/2009
04:05 PM
Connect Directly
Google+
Twitter
RSS
E-Mail
50%
50%

Major SSL Flaw Find Prompts Protocol Update

Vendors, IETF, have been working on a fix since last month for a newly discovered vulnerability in the SSL protocol that spans browsers, servers, smart cards, and other products

The Internet Engineering Task Force (IETF) is about to issue a proposed extension to Secure Sockets Layer (SSL) that addresses a major vulnerability in the protocol that was inadvertently disclosed publicly late yesterday -- a flaw that affects browsers, servers, smart cards, VPN products, as well as many lower-profile products that contain the protocol embedded in their firmware.

Marsh Ray, who first discovered the bug in August, has been working with the IETF, vendors including Google and Mozilla, and members of the Industry Consortium for the Advancement of Security on the Internet (ICASI) on a fix since last month. He says he expects the IETF to issue a proposed extension to its specification for SSL, known as Transport Layer Security (TLS) in IETF parlance, as early as today. Software vendors that use SSL can then create patches for the vulnerability.

"The bug results in a set of related attacks that allow a man-in-the-middle to do bad things to your SSL/TLS connection. The [attacker] in the middle is able to inject his own chosen text into what your application believes is an encrypted, secure communications channel," says Ray, a senior software development engineer for PhoneFactor. "This has implications for all protocols that run on top of SSL/TLS, such as HTTPS."

Dan Kaminsky, director of penetration testing for IOActive, says he doesn't think the flaw is limited to just injecting traffic. "HTTPS content will leak because of this bug," Kaminsky says. "Never underestimate the usefulness of a subtle cryptographic vulnerability. Nobody would say, 'Well, it's just an iceberg, and we're heading right for it, but it's not like it's cut a huge gash in the ship yet.'"

SSL has been under siege during the past year, with the groundbreaking man-in-the-middle hack by researcher Moxie Marlinspike, which dupes a user into thinking he's in an HTTPS session when in reality he has been taken elsewhere by the attacker, as well as Kaminsky's research exposing critical flaws in X.509 certificate technology used in SSL.

But this latest threat resides within the SSL protocol itself and will require fixes to browsers, Web servers, database servers, mail servers, SQL servers, smart cards, and other SSL-based software. "All the [SSL] attacks I've seen [recently] have been around the client or server software, or the way it handles a certificate," Ray says. "What's different with this [bug] is that both the client and server need to be patched to restore the full security guarantees that are expected with TLS."

Marlinspike maintains that the newly found SSL flaw is not earth-shattering. "The sky is not falling," he says. "This was some clever work, and it is interesting for those of us who are into secure protocols, but I have yet to see an example of how this could significantly impact the way that SSL/TLS is commonly deployed in ways that differ from simple CSRF [cross-site request forgery]."

PhoneFactor had kept the bug under wraps for several months as vendors worked on ways to fix it. But when another researcher stumbled across some of the same issues and posted them to a public mailing list yesterday, word got out fast, so Ray decided to reveal the details of his work.

The IETF will issue a new extension for the SSL/TLS protocol that fixes the bug, which is basically a gap in the authentication process that lets an attacker execute a man-in-the-middle attack. The gap occurs in the renegotiation process of the session -- a time when some applications require the encryption process be "refreshed" after a certain point.

The proposed SSL/TLS extension allows renegotiation but restores security during that process, Ray says. "It defines an extension header that lets a client and server indicate what they believe was going on over the communications channel before the renegotiation. It restores the continuity of authentication," he says.

More worrisome, meanwhile, is finding and fixing smaller products with embedded devices that use SSL. "There's a very long tail of smaller [SSL] implementations in embedded devices," Ray says. "We'll probably be tracking them down for years to come."

Ray says end users shouldn't worry too much about the attack for now, but should be ready to patch for the SSL bug. "It's important that everybody fix their software as soon as patches become available," he says.

Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.

Kelly Jackson Higgins is the Executive Editor of Dark Reading. She is an award-winning veteran technology and business journalist with more than two decades of experience in reporting and editing for various publications, including Network Computing, Secure Enterprise ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Why Cyber-Risk Is a C-Suite Issue
Marc Wilczek, Digital Strategist & CIO Advisor,  11/12/2019
Unreasonable Security Best Practices vs. Good Risk Management
Jack Freund, Director, Risk Science at RiskLens,  11/13/2019
Breaches Are Inevitable, So Embrace the Chaos
Ariel Zeitlin, Chief Technology Officer & Co-Founder, Guardicore,  11/13/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Navigating the Deluge of Security Data
In this Tech Digest, Dark Reading shares the experiences of some top security practitioners as they navigate volumes of security data. We examine some examples of how enterprises can cull this data to find the clues they need.
Flash Poll
Rethinking Enterprise Data Defense
Rethinking Enterprise Data Defense
Frustrated with recurring intrusions and breaches, cybersecurity professionals are questioning some of the industrys conventional wisdom. Heres a look at what theyre thinking about.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-13581
PUBLISHED: 2019-11-15
An issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla Model S/X vehicles manufactured before March 2018, via the Parrot Faurecia Automotive FC6050W module. A heap-based buffer overflow allows remote attackers to cause a denial of service or execute arbitrary ...
CVE-2019-13582
PUBLISHED: 2019-11-15
An issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla Model S/X vehicles manufactured before March 2018, via the Parrot Faurecia Automotive FC6050W module. A stack overflow could lead to denial of service or arbitrary code execution.
CVE-2019-6659
PUBLISHED: 2019-11-15
On version 14.0.0-14.1.0.1, BIG-IP virtual servers with TLSv1.3 enabled may experience a denial of service due to undisclosed incoming messages.
CVE-2019-6660
PUBLISHED: 2019-11-15
On BIG-IP 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.1, undisclosed HTTP requests may consume excessive amounts of systems resources which may lead to a denial of service.
CVE-2019-6661
PUBLISHED: 2019-11-15
When the BIG-IP APM 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.4.1, or 11.5.1-11.6.5 system processes certain requests, the APD/APMD daemon may consume excessive resources.