OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-5094. NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation     within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of     service (CPU consumption) by performing many renegotiations within a single connection, a different     vulnerability than CVE-2011-5094. NOTE: it can also be argued that it is the responsibility of server     deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a     specific environment (CVE-2011-1473)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to its self-reported version number, the Symantec (formerly Blue Coat) Reporter installation running on the remote host is prior to 10.3.1.1. It is, therefore,  is affected by a denial of service vulnerability. The SSL/TLS implementation on the remote host allows clients to renegotiate connections. The computational requirements forrenegotiating a connection are asymmetrical between the client and the server, with the server performing several times more work. Since the remote host does not appear to limit the number of renegotiations for a single TLS / SSL connection, this permits a client to open several simultaneous connections and repeatedly renegotiate them, possibly leading to a denial of service condition.

Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

This Apache2 LTSS roll-up update for SUSE Linux Enterprise 10 SP3 LTSS fixes the following security issues and bugs :

  - CVE-2012-4557: Denial of Service via special requests in     mod_proxy_ajp

  - CVE-2012-0883: improper LD_LIBRARY_PATH handling

  - CVE-2012-2687: filename escaping problem

  - CVE-2012-0031: Fixed a scoreboard corruption (shared mem     segment) by child causes crash of privileged parent     (invalid free()) during shutdown.

  - CVE-2012-0053: Fixed an issue in error responses that     could expose 'httpOnly' cookies when no custom     ErrorDocument is specified for status code 400'.

  - The SSL configuration template has been adjusted not to     suggested weak ciphers CVE-2007-6750: The     'mod_reqtimeout' module was backported from Apache     2.2.21 to help mitigate the 'Slowloris' Denial of     Service attack.

    You need to enable the 'mod_reqtimeout' module in your     existing apache configuration to make it effective, e.g.
    in the APACHE_MODULES line in /etc/sysconfig/apache2.

  - CVE-2011-3639, CVE-2011-3368, CVE-2011-4317: This update     also includes several fixes for a mod_proxy reverse     exposure via RewriteRule or ProxyPassMatch directives.

  - CVE-2011-1473: Fixed the SSL renegotiation DoS by     disabling renegotiation by default.

  - CVE-2011-3607: Integer overflow in ap_pregsub function     resulting in a heap-based buffer overflow could     potentially allow local attackers to gain privileges

Additionally, some non-security bugs have been fixed which are listed in the changelog file.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability. The SSL/TLS implementation on the remote host allows clients to renegotiate connections. The computational requirements for renegotiating a connection are asymmetrical between the client and the server, with the server performing several times more work. Since the remote host does not appear to limit the number of renegotiations for a single TLS / SSL connection, this permits a client to open several simultaneous connections and repeatedly renegotiate them, possibly leading to a denial of service condition.

Note that this issue only affects devices with J-Web or the SSL service for JUNOScript enabled.

This update fixes several security issues in the Apache2 webserver.

  - This update also includes several fixes for a mod_proxy     reverse exposure via RewriteRule or ProxyPassMatch     directives. (CVE-2011-3639 / CVE-2011-3368 /     CVE-2011-4317)

  - Fixed the SSL renegotiation DoS by disabling     renegotiation by default. (CVE-2011-1473)

  - Integer overflow in ap_pregsub function resulting in a     heap-based buffer overflow could potentially allow local     attackers to gain privileges. (CVE-2011-3607)

This update fixes several security issues in the Apache2 webserver.

  - This update also includes several fixes for a mod_proxy     reverse exposure via RewriteRule or ProxyPassMatch     directives. (CVE-2011-3639 / CVE-2011-3368 /     CVE-2011-4317)

  - Fixed the SSL renegotiation DoS by disabling     renegotiation by default. (CVE-2011-1473)

  - Integer overflow in ap_pregsub function resulting in a     heap-based buffer overflow could potentially allow local     attackers to gain privileges. (CVE-2011-3607)

Also a non-security bug was fixed :

  - httpd-2.2.x-bnc727071-mod_authnz_ldap-utf8.diff: make     non-ascii eg UTF8 passwords work with mod_authnz_ldap.
    [bnc#727071]

ID	Name	Product	Family	Severity
217391	Linux Distros Unpatched Vulnerability : CVE-2011-1473	Nessus	Misc.	critical
125357	Symantec (Blue Coat) Reporter Denial of Service vulnerability (SYMSA1280)	Nessus	CGI abuses	medium
83578	SUSE SLES10 Security Update : apache2 (SUSE-SU-2013:0469-1)	Nessus	SuSE Local Security Checks	medium
68913	Juniper Junos SSL/TLS Renegotiation DoS (JSA10580)	Nessus	Junos Local Security Checks	medium
57298	SuSE 10 Security Update : Apache2 (ZYPP Patch Number 7882)	Nessus	SuSE Local Security Checks	medium
57090	SuSE 11.1 Security Update : Apache2 (SAT Patch Number 5482)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2011-1473

critical

Tenable Plugins

critical

medium

medium

medium

medium

medium