OpenSSL Version Rollback and Weak Cryptographic Algorithm Vulnerabilities

Available Languages

Updated:October 8, 2015
Document ID:1454772595564661

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Cisco Security Advisory

OpenSSL Version Rollback and Weak Cryptographic Algorithm Vulnerabilities

Medium
Advisory ID:
Cisco-SA-20051012-CVE-2005-2969
First Published:
2005 October 12 15:54 GMT
Last Updated: 
2015 January 31 09:00 GMT
Version 29.0:
Final
Workarounds:
See below
CVE-2005-2946
CVE-2005-2969
CVSS Score:
Base 4.3, Temporal 3.2Click Icon to Copy Verbose Score
AV:N/AC:M/Au:M/C:P/I:P/A:N/E:U/RL:OF/RC:C
CVE-2005-2946
CVE-2005-2969

Summary

  • OpenSSL contains vulnerabilities that could allow an unauthenticated, remote attacker to bypass security restrictions.

    The first vulnerability (CVE-2005-2969) affects any application using a SL/TLS server implementation provided by OpenSSL versions 0.9.7g and prior.  If these implementations have options designed to mitigate third party bugs enabled, a remote attacker conducting a man-in-the-middle attack could force connections between the hosts to use the 2.0 version of the SSL protocol.  A known cryptographic weaknesses exists in the SSL 2.0 protocol.

    The second vulnerability (CVE-2005-2946) exists in the default configuration of OpenSSL versions prior to 0.9.8a.  This configuration creates message digests using MD5.  Weaknesses in the cryptographic algorithm could allow a remote attacker to forge certificates with valid certificate authority signatures.

    OpenSSL confirmed this vulnerability in a security advisory and released updates.



    Attackers are unlikely to exploit these vulnerabilities due to the man-in-the-middle attack vector.  Such attacks are very difficult to perform due to the requirement of intercepting and modifying traffic between two hosts in real time.  Man-in-the-middle attack are typically only useable by an attacker with physical access to the devices or connections between a customer and service provider.

    There have been a number of demonstrations recently of weaknesses in the MD5 algorithm.  While MD5 is technically broken, it is not insecure.  It is unlikely that an attacker could successfully create an MD5 collision for use in signing a fake certificate.

    Administrators should not take particular concern with either of these issues.  Administrators may consider waiting to update productions systems until full testing of the updated version is complete.  If concern of these issues does arise, administrators may consider removing the IE 3.x compatibility flag.

Affected Products

Workarounds

  • Administrators are advised to apply the appropriate update.

    Administrators are advised to disable the 2.0 version of the SSL protocol in OpenSSL applications.

    Administrators may consider removing the affected flags to mitigate the SSL rollback vulnerability.

Fixed Software

Exploitation and Public Announcements

  • The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.

Cisco Security Vulnerability Policy

  • To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.

Subscribe to Cisco Security Notifications

URL

Revision History

  • VersionDescriptionSectionStatusDate
    1.0Initial ReleaseNAFinal2005-Oct-12
    Show Less

Cisco Security Vulnerability Policy

  • To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.

Subscribe to Cisco Security Notifications