BID:40503

OpenSSL 'EVP_PKEY_verify_recover()' Invalid Return Value Security Bypass Vulnerability

Info

OpenSSL 'EVP_PKEY_verify_recover()' Invalid Return Value Security Bypass Vulnerability

Bugtraq ID:	40503
Class:	Unknown
CVE:	CVE-2010-1633
Remote:	Yes
Local:	No
Published:	Jun 01 2010 12:00AM
Updated:	Apr 13 2015 08:38PM
Credit:	Peter-Michael Hager
Vulnerable:	VooDoo cIRCle XTelnet 0.4.5 VooDoo cIRCle 1.1.39 OpenSSL Project OpenSSL 1.0.2 OpenSSL Project OpenSSL 1.0 beta3 OpenSSL Project OpenSSL 1.0 Beta2 OpenSSL Project OpenSSL 1.0 beta1 OpenSSL Project OpenSSL 1.0 OpenSSL Project OpenSSL 1.0.0 Beta5 OpenSSL Project OpenSSL 1.0.0 Beta4 Kolab Kolab Groupware Server 2.2.3 Kolab Kolab Groupware Server 2.2.2 Kolab Kolab Groupware Server 2.2 Kolab Kolab Groupware Server 2.2-rc3 Kolab Kolab Groupware Server 2.2-rc1 Kolab Kolab Groupware Server 2.2 beta3 Kolab Kolab Groupware Server 2.2 beta1 Kolab Kolab Groupware Server 2.2 -rc2

Not Vulnerable:	VooDoo cIRCle XTelnet 0.4.6 VooDoo cIRCle 1.1.40 OpenSSL Project OpenSSL 1.0.0a Kolab Kolab Groupware Server 2.2.4

Discussion

OpenSSL 'EVP_PKEY_verify_recover()' Invalid Return Value Security Bypass Vulnerability

OpenSSL is prone to a security-bypass vulnerability.

Successful exploit may allow attackers to potentially bypass key checks in applications using the affected library; other attacks are also possible.

OpenSSL 1.0.0 is vulnerable; prior versions are not affected.

Exploit / POC

OpenSSL 'EVP_PKEY_verify_recover()' Invalid Return Value Security Bypass Vulnerability

The attacker will likely use standard tools to exploit this issue.

Solution / Fix

OpenSSL 'EVP_PKEY_verify_recover()' Invalid Return Value Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

Kolab Kolab Groupware Server 2.2-rc3