Detections
Analytics
CentOS 3 / 4 : openssl (CESA-2005:800)
medium Nessus Plugin ID 21861
Synopsis
The remote CentOS host is missing one or more security updates.Description
Updated OpenSSL packages that fix various security issues are now available.This update has been rated as having moderate security impact by the Red Hat Security Response Team.
OpenSSL is a toolkit that implements Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well as a full-strength general purpose cryptography library.
OpenSSL contained a software work-around for a bug in SSL handling in Microsoft Internet Explorer version 3.0.2. This work-around is enabled in most servers that use OpenSSL to provide support for SSL and TLS.
Yutaka Oiwa discovered that this work-around could allow an attacker, acting as a 'man in the middle' to force an SSL connection to use SSL 2.0 rather than a stronger protocol such as SSL 3.0 or TLS 1.0. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-2969 to this issue.
A bug was also fixed in the way OpenSSL creates DSA signatures. A cache timing attack was fixed in RHSA-2005-476 which caused OpenSSL to do private key calculations with a fixed time window. The DSA fix for this was not complete and the calculations are not always performed within a fixed-window. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-0109 to this issue.
Users are advised to upgrade to these updated packages, which remove the MISE 3.0.2 work-around and contain patches to correct these issues.
Note: After installing this update, users are advised to either restart all services that use OpenSSL or restart their system.
Solution
Update the affected openssl packages.See Also
http://www.nessus.org/u?5ad41a78
http://www.nessus.org/u?1b0f60b2
Plugin Details
Severity: Medium
ID: 21861
File Name: centos_RHSA-2005-800.nasl
Version: 1.19
Type: local
Agent: unix
Family: CentOS Local Security Checks
Published: 7/3/2006
Updated: 1/4/2021
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.2
CVSS v2
Risk Factor: Medium
Base Score: 5
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N
CVSS v3
Risk Factor: Medium
Base Score: 5.6
Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Vulnerability Information
CPE: p-cpe:/a:centos:centos:openssl, cpe:/o:centos:centos:3, p-cpe:/a:centos:centos:openssl-perl, p-cpe:/a:centos:centos:openssl-devel, cpe:/o:centos:centos:4, p-cpe:/a:centos:centos:openssl096b
Required KB Items: Host/local_checks_enabled, Host/CentOS/release, Host/CentOS/rpm-list
Patch Publication Date: 10/11/2005
Vulnerability Publication Date: 3/5/2005
Reference Information
CVE: CVE-2005-0109, CVE-2005-2969
RHSA: 2005:800