|
|
Info |
Last Modified |
| 6 months ago |
|
|
|
|
Description |
Multiple IPSec implementations, including KAME, ipsec-tools, and operating systems that include them contain a flaw that may allow a malicious user to make a successful IPSec connection without proper authorization. The issue is triggered when the attacker possesses any valid and trusted X.509 certificate and the server attempts to use RSA signature authentication. While the server does check the validity of the X.509 certificate, it fails to check the RSA signature of that certificate. It is possible that the flaw may allow unauthorized access, resulting in a loss of confidentiality.
|
|
Classification |
Location:
Local Access Required,
Remote/Network Access Required
Attack Type:
Authentication Management,
Input Manipulation,
Misconfiguration
Impact:
Loss of Confidentiality
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Technical |
The KAME IKE daemon Racoon and its Linux 2.6 port in ipsec-tools fail to verify the RSA signature during phase one of an IPSec connection, using either main or aggressive mode. The X.509 certificate of the client is verified, but the certificate is not used to verify the client's signature. This could allow remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks, provided that they possess a valid, trusted X.509 certificate. As you can see, the vulnerable code in the eay_rsa_verify() function of crypto_openssl.c reads as follows:
evp = d2i_PUBKEY(NULL, &bp, pubkey->l);
if (evp == NULL)
return 0;
d2i_PUBKEY always returns NULL, and so the function always exits with the returncode 0 (success). There is no signature verification.
|
|
Solution |
Upgrade to version 1.84 of KAME or a recent CVS tree, version 1.62 of NetBSD, version 4.9-CURRENT of FreeBSD, version 0.2.5 of ipsec-tools, or higher, as these have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
|
|
Products |
|
FreeBSD
 |
4.9-RELEASE |
|
NetBSD
|
1.6 |
1.6.1 |
|
IPsec-tools
|
0.1 |
0.2 |
0.3rc4 |
0.2.4 |
0.2.3 |
0.2.2 |
0.2.1 |
|
Mac OS X
|
10.2.8 |
10.3.3 |
|
KAME Racoon
|
CVS prior to April 06 2004 |
1.83 |
|
|
|
|
|
|
Credit |
- Ralf Spenneberg - ralf
 spenneberg.net -
- Michal Ludvig - michallogix.cz - IPSec-Tools
- Hans Hacker -
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
