CNVD-2015-03367

Vulnerability from cnvd - Published: 2015-05-27
VLAI
Title
TLS protocol中间人攻击漏洞
Description
TLS（Transport Layer Security，安全传输层协议）是一套用于在两个通信应用程序之间提供保密性和数据完整性的协议。 TLS协议1.2及之前版本中存在安全漏洞。当服务器启用DHE_EXPORT密码套件时，程序未能正确传递DHE_EXPORT选项。攻击者可通过重写ClientHello（使用DHE_EXPORT取代DHE），然后重写ServerHello（使用DHE取代DHE_EXPORT），利用该漏洞实施中间人攻击和cipher-downgrade攻击。
Severity
中
Formal description

目前没有详细解决方案提供： https://weakdh.org/

Reference
https://weakdh.org/ https://weakdh.org/imperfect-forward-secrecy.pdf
Impacted products
Name
['Mozilla Firefox', 'Apple Safari', 'Google Chrome', 'Microsoft IE', 'Opera Opera browser']
Show details on source website
To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-4000"
    }
  },
  "description": "TLS\uff08Transport Layer Security\uff0c\u5b89\u5168\u4f20\u8f93\u5c42\u534f\u8bae\uff09\u662f\u4e00\u5957\u7528\u4e8e\u5728\u4e24\u4e2a\u901a\u4fe1\u5e94\u7528\u7a0b\u5e8f\u4e4b\u95f4\u63d0\u4f9b\u4fdd\u5bc6\u6027\u548c\u6570\u636e\u5b8c\u6574\u6027\u7684\u534f\u8bae\u3002\r\n\r\nTLS\u534f\u8bae1.2\u53ca\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u5f53\u670d\u52a1\u5668\u542f\u7528DHE_EXPORT\u5bc6\u7801\u5957\u4ef6\u65f6\uff0c\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u4f20\u9012DHE_EXPORT\u9009\u9879\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u91cd\u5199ClientHello\uff08\u4f7f\u7528DHE_EXPORT\u53d6\u4ee3DHE\uff09\uff0c\u7136\u540e\u91cd\u5199ServerHello\uff08\u4f7f\u7528DHE\u53d6\u4ee3DHE_EXPORT\uff09\uff0c\u5229\u7528\u8be5\u6f0f\u6d1e\u5b9e\u65bd\u4e2d\u95f4\u4eba\u653b\u51fb\u548ccipher-downgrade\u653b\u51fb\u3002",
  "discovererName": "cve-assign@...re.org",
  "formalWay": "\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u89e3\u51b3\u65b9\u6848\u63d0\u4f9b\uff1a\r\nhttps://weakdh.org/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-03367",
  "openTime": "2015-05-27",
  "products": {
    "product": [
      "Mozilla Firefox",
      "Apple  Safari",
      "Google Chrome",
      "Microsoft IE",
      "Opera Opera browser"
    ]
  },
  "referenceLink": "https://weakdh.org/\r\nhttps://weakdh.org/imperfect-forward-secrecy.pdf",
  "serverity": "\u4e2d",
  "submitTime": "2015-05-21",
  "title": "TLS protocol\u4e2d\u95f4\u4eba\u653b\u51fb\u6f0f\u6d1e"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.