PT-2003-1004 · Eric A. Young Tim J. Hudson+1 · Ssleay+1

Alain Hiltgen + 3 · Published 2003-03-03 · Updated 2024-02-14 · CVE-2003-0078

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 0.9.6i OpenSSL versions prior to 0.9.7a OpenSSL-0.9.5a OpenSSL-0.9.6b OpenSSL-devel-0.9.5a OpenSSL-devel-0.9.6b OpenSSL-devel-0.9.6 ssleay (affected versions not specified)

Description The issue is related to multiple vulnerabilities in the OpenSSL package, which can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. The problem lies in the ssl3 get record function in s3 pkt.c, which does not perform a MAC computation if an incorrect block cipher padding is used, causing an information leak (timing discrepancy) that may make it easier to launch cryptographic attacks. This could potentially lead to the extraction of the original plaintext.

Recommendations For OpenSSL versions prior to 0.9.6i and 0.9.7a, update to a version that includes the fix for the ssl3 get record function issue. For OpenSSL-0.9.5a, OpenSSL-0.9.6b, OpenSSL-devel-0.9.5a, OpenSSL-devel-0.9.6b, and OpenSSL-devel-0.9.6, consider disabling the ssl3 get record function as a temporary workaround until a patch is available. For ssleay, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Side Channel Attack

Weakness Enumeration

CWE-125

CWE-203

Related Identifiers

BDU:2015-01378

BDU:2015-08198

BDU:2015-08199

BDU:2015-08200

BDU:2015-08202

BDU:2015-08203

BDU:2015-08205

BDU:2015-08206

BDU:2015-08207

CVE-2003-0078

DSA-253

Affected Products

Openssl

Ssleay

References · 45

• 🔥 https://exploit-db.com/exploits/22264 · Exploit
• https://bdu.fstec.ru/vul/2015-08207 · Security Note
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-001.txt.asc · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0078 · Security Note
• http://trustix.org/errata/2003/0005 · Vendor Advisory
• http://linuxsecurity.com/advisories/engarde_advisory-2874.html · Vendor Advisory
• http://mandrakesoft.com/security/advisories?name=MDKSA-2003:020 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-205.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-063.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0078 · Security Note
• http://redhat.com/support/errata/RHSA-2003-062.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08199 · Security Note
• ftp://patches.sgi.com/support/free/security/advisories/20030501-01-I · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0078 · Vendor Advisory
• http://iss.net/security_center/static/11369.php · Vendor Advisory