The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-1923.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - openssl: weak public value accepted during Diffie Hellman key exchange (CVE-2011-5095)

  - openssl: PKCS7 NULL pointer dereference (CVE-2015-0289)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN) (CVE-2016-0800)

  - The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not     properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the     shared secret key by modifying network traffic, a related issue to CVE-2011-1923. (CVE-2011-5095)

  - The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2     before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a     denial of service (NULL pointer dereference and application crash) by leveraging an application that     processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to     crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c. (CVE-2015-0289)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This update adds libopenssl0_9_8-hmac packages, that, when installed, will enforce FIPS 140-2 self-test being run upon first use of the library.

If FIPS mode is enforced, these new packages are required in order to enable FIPS mode successfully.

The update also imposes limits on the parameters of a Diffie-Hellman key exchange to prevent man-in-the-middle (MITM) attacks in FIPS mode.
(CVE-2011-5095)

ID	Name	Product	Family	Severity
199584	RHEL 6 : openssl097a (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199565	RHEL 5 : openssl097a (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
64186	SuSE 11.1 Security Update : libopenssl (SAT Patch Number 6521)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2011-5095

medium

Tenable Plugins

high

medium

medium