Qt SSL Certificate IP Address Wildcard Validation Security Bypass Vulnerability
BID:42833
Info
Qt SSL Certificate IP Address Wildcard Validation Security Bypass Vulnerability
| Bugtraq ID: | 42833 |
| Class: | Design Error |
| CVE: |
CVE-2010-5076 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 27 2010 12:00AM |
| Updated: | Jul 12 2012 05:00PM |
| Credit: | Richard Moore and Simon Ward. |
| Vulnerable: |
Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Trolltech Qt 4.6 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 |
| Not Vulnerable: |
Trolltech Qt 4.7.0 |
Discussion
Qt SSL Certificate IP Address Wildcard Validation Security Bypass Vulnerability
Qt is prone to a security-bypass vulnerability because the application fails to properly validate SSL certificates containing 'CN' as a wildcard in use with IP addresses, allowing attackers to substitute malicious SSL certificates for trusted ones.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
Qt versions 4.6 and prior are vulnerable.
Qt is prone to a security-bypass vulnerability because the application fails to properly validate SSL certificates containing 'CN' as a wildcard in use with IP addresses, allowing attackers to substitute malicious SSL certificates for trusted ones.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
Qt versions 4.6 and prior are vulnerable.
Exploit / POC
Qt SSL Certificate IP Address Wildcard Validation Security Bypass Vulnerability
Attackers use man-in-the-middle attacks to exploit this issue.
Attackers use man-in-the-middle attacks to exploit this issue.
Solution / Fix
Qt SSL Certificate IP Address Wildcard Validation Security Bypass Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Qt SSL Certificate IP Address Wildcard Validation Security Bypass Vulnerability
References:
References:
- Bug Report Page (Trolltech )
- Home Page (Qt Software)
- Multiple Browser Wildcard Cerficate Validation Weakness (Westpoint)