Apple Safari NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
BID:36477
Info
Apple Safari NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
| Bugtraq ID: | 36477 |
| Class: | Design Error |
| CVE: |
CVE-2009-3455 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 30 2009 12:00AM |
| Updated: | Apr 13 2015 09:06PM |
| Credit: | Dan Kaminsky and Moxie Marlinspike |
| Vulnerable: |
Apple Safari For Windows 3.2.1 Apple Safari 4.0.3 for Windows Apple Safari 4.0.2 for Windows Apple Safari 3.2.3 for Windows Apple Safari 3.2.2 for Windows Apple Safari 3.1.2 for Windows Apple Safari 3.1.1 for Windows Apple Safari 3.0.4 Beta for Windows Apple Safari 3.0.3 Beta for Windows Apple Safari 3.0.2 Beta for Windows Apple Safari 3.0.1 Beta for Windows Apple Safari 4 for Windows Apple Safari 3.1 for Windows Apple Safari 3 Beta for Windows |
| Not Vulnerable: | |
Discussion
Apple Safari NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
Apple Safari is prone to a security-bypass vulnerability because it fails to properly validate the domain name in a signed CA certificate, allowing attackers to substitute malicious SSL certificates for trusted ones.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
UPDATE (October 5, 2009): The vendor states that Safari on Mac OS X is not affected by this issue.
Apple Safari is prone to a security-bypass vulnerability because it fails to properly validate the domain name in a signed CA certificate, allowing attackers to substitute malicious SSL certificates for trusted ones.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
UPDATE (October 5, 2009): The vendor states that Safari on Mac OS X is not affected by this issue.
Exploit / POC
Apple Safari NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
Attackers use man-in-the-middle attacks to exploit this issue.
Attackers use man-in-the-middle attacks to exploit this issue.
Solution / Fix
Apple Safari NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Apple Safari NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
References:
References:
- Apple Safari Homepage (Apple)
- More Tricks For Defeating SSL (Moxie Marlinspike)
- Null Prefix Attacks Against SSL/TLS Certificates (Moxie Marlinspike)
- SSL flaw revealed at Black Hat (Wendy Grossman)
- Vulnerabilities Allow Attacker to Impersonate Any Website (Kim Zetter)