OpenSSL DTLS Implementations Man in the Middle Multiple Security Bypass Vulnerabilities

BID:64618

Info

OpenSSL DTLS Implementations Man in the Middle Multiple Security Bypass Vulnerabilities

Bugtraq ID: 64618
Class: Design Error
CVE: CVE-2013-6450
Remote: Yes
Local: No
Published: Dec 20 2013 12:00AM
Updated: May 12 2015 07:46PM
Credit: The vendor reported these issues.
Vulnerable: Ubuntu Ubuntu Linux 13.10
Ubuntu Ubuntu Linux 13.04
Ubuntu Ubuntu Linux 12.10
Ubuntu Ubuntu Linux 12.04 LTS
Slackware Slackware Linux 14.1
Slackware Slackware Linux 14.0
S.u.S.E. openSUSE 13.1
S.u.S.E. openSUSE 12.3
S.u.S.E. openSUSE 12.2
S.u.S.E. openSUSE 11.4
Redhat Enterprise Linux Workstation Optional 6
Redhat Enterprise Linux Workstation 6
Redhat Enterprise Linux Server Optional 6
Redhat Enterprise Linux Server 6
Redhat Enterprise Linux HPC Node Optional 6
Redhat Enterprise Linux HPC Node 6
Redhat Enterprise Linux Desktop Optional 6
Redhat Enterprise Linux Desktop 6
Puppetlabs Puppet 3.1.1
Puppetlabs Puppet 3.1
Puppetlabs Puppet 3.0.1
Puppetlabs Puppet 2.8.3
Puppetlabs Puppet 2.7.23
Puppetlabs Puppet 2.7.22
Puppetlabs Puppet 2.7.21
Puppetlabs Puppet 2.7.18
Puppetlabs Puppet 2.7.13
Puppetlabs Puppet 2.7.11
Puppetlabs Puppet 2.7.10
Puppetlabs Puppet 2.7.5
Puppetlabs Puppet 2.7.4
Puppetlabs Puppet 2.6.18
Puppetlabs Puppet 2.6.17
Puppetlabs Puppet 2.6.15
Puppetlabs Puppet 2.6.14
Puppetlabs Puppet 2.6.13
Puppetlabs Puppet 2.6.11
Puppetlabs Puppet 2.6.10
Puppetlabs Puppet 2.6.4
Puppetlabs Puppet 2.6.3
Puppetlabs Puppet 2.7
Puppetlabs Puppet 2.6
Oracle Solaris 11.2
Oracle Solaris 11.1
Oracle Integrated Lights Out Manager 3.2.3
Oracle Enterprise Linux 6.2
Oracle Enterprise Linux 6
OpenSSL Project OpenSSL 1.0
OpenSSL Project OpenSSL 1.0.1e
OpenSSL Project OpenSSL 0.9.8y
McAfee Email Gateway 7.6
McAfee Email Gateway 7.5
Mandriva Business Server 1 X86 64
Mandriva Business Server 1
IBM Virtual I/O Server (VIOS) 2.2.1 4
IBM Virtual I/O Server (VIOS) 2.1
IBM Virtual I/O Server (VIOS) 2.2
IBM Virtual I/O Server (VIOS) 2.1
IBM Virtual I/O Server (VIOS) 2.0
IBM Tivoli Storage Productivity Center 5.2.1 0
IBM Tivoli Storage Productivity Center 5.2
IBM Tivoli Storage Productivity Center 5.1.1 3
IBM Tivoli Storage Productivity Center 5.1.1
IBM Tivoli Storage Productivity Center 5.1
IBM Tivoli Storage Productivity Center 4.2.2 143
IBM Tivoli Storage Productivity Center 5.1.1.4
IBM Tivoli Storage Productivity Center 5.1.1.2
IBM Tivoli Storage Productivity Center 5.1.1.1
IBM Tivoli Storage Productivity Center 5.1.1.0
IBM Tivoli Storage Productivity Center 4.2.2.178
IBM Tivoli Storage Productivity Center 4.2.2.177
IBM Tivoli Storage Productivity Center 4.2.2.170 (FP4)
IBM Tivoli Storage Productivity Center 4.2.2.145
IBM Tivoli Storage Productivity Center 4.2.2.143 (FP3)
IBM Tivoli Storage Productivity Center 4.2.2 FP3
IBM Tivoli Storage Productivity Center 4.2.1.185
IBM Tivoli Storage Productivity Center 4.2.1 Fix Pack 4
IBM Tivoli Storage Productivity Center 4.2.1
IBM Tivoli Storage Productivity Center 4.2.0
IBM Tivoli Storage Productivity Center 4.1
IBM Tivoli Provisioning Manager for Images System x Edition 7.1.1.0
IBM Tivoli Provisioning Manager for Images 7.1.1.0
IBM Tivoli Netcool/System Service Monitor 4.0.0 FP9
IBM Tivoli Netcool/System Service Monitor 4.0.0 FP8
IBM Tivoli Netcool/System Service Monitor 4.0.0 FP7
IBM Tivoli Netcool/System Service Monitor 4.0.0 FP6
IBM Tivoli Netcool/System Service Monitor 4.0.0 FP5
IBM Tivoli Netcool/System Service Monitor 4.0.0 FP4
IBM Tivoli Netcool/System Service Monitor 4.0.0 FP3
IBM Tivoli Netcool/System Service Monitor 4.0.0 FP2
IBM Tivoli Netcool/System Service Monitor 4.0.0 FP13
IBM Tivoli Netcool/System Service Monitor 4.0.0 FP12
IBM Tivoli Netcool/System Service Monitor 4.0.0 FP11
IBM Tivoli Netcool/System Service Monitor 4.0.0 FP10
IBM Tivoli Netcool/System Service Monitor 4.0.0 FP1
IBM Tivoli Netcool System Service Monitors 4.0.1
IBM Tivoli Management Framework 4.1.1
IBM Tivoli Composite Application Manager for Transactions 7.4
IBM Tivoli Composite Application Manager for Transactions 7.3.0
IBM Tivoli Composite Application Manager for Transactions 7.2.0
IBM Systems Director Platform Agent 6.3.4
IBM Systems Director Platform Agent 6.3.2
IBM Systems Director Common Agent 6.3.4
IBM Systems Director Common Agent 6.3.2
IBM Storwize V7000 Unified 1.4.3 2
IBM Storwize V7000 Unified 1.4 1
IBM Storwize V7000 Unified 1.4 0
IBM Storwize V7000 Unified 1.3.2 3
IBM Storwize V7000 Unified 1.3.2 1
IBM Storwize V7000 Unified 1.3.2 0
IBM Storwize V7000 Unified 1.4.3.0
IBM Storwize V7000 Unified 1.4.2.0
IBM Storwize V7000 Unified 1.3.1.0
IBM Storwize V7000 Unified 1.3.0.5
IBM Storwize V7000 Unified 1.3.0.0
IBM Sterling Connect:Express for UNIX 1.5.0
IBM Sterling B2B Integrator 5.2
IBM Smart Analytics System 7710 9.7
IBM Smart Analytics System 7700 9.7
IBM Smart Analytics System 7600 9.7
IBM Smart Analytics System 5710 9.7
IBM Smart Analytics System 5600 9.7
IBM Smart Analytics System 5600 10.1
IBM Smart Analytics System 2050 for Linux 9.7
IBM Smart Analytics System 1050 for Linux 9.7
IBM Security Proventia Network Active Bypass 3.0
IBM Security Proventia Network Active Bypass 1.0
IBM Security Network Intrusion Prevention System GX7800 4.6.1
IBM Security Network Intrusion Prevention System GX7412-10 4.6.1
IBM Security Network Intrusion Prevention System GX7412-05 4.6.1
IBM Security Network Intrusion Prevention System GX7412 4.6.1
IBM Security Network Intrusion Prevention System GX6116 4.6.1
IBM Security Network Intrusion Prevention System GX5208-v2 4.6.1
IBM Security Network Intrusion Prevention System GX5208 4.6.1
IBM Security Network Intrusion Prevention System GX5108-v2 4.6.1
IBM Security Network Intrusion Prevention System GX5108 4.6.1
IBM Security Network Intrusion Prevention System GX5008-v2 4.6.1
IBM Security Network Intrusion Prevention System GX5008 4.6.1
IBM Security Network Intrusion Prevention System GX4004-v2 4.6.1
IBM Security Network Intrusion Prevention System GX4004 4.6.1
IBM Security Network Intrusion Prevention System GX4002 4.6.1
IBM Security Network Intrusion Prevention System GX3002 4.6.1
IBM Security Network Intrusion Prevention System GV200 4.6.1
IBM Security Network Intrusion Prevention System GV1000 4.6.1
IBM Scale Out Network Attached Storage 1.3.2 1-21
IBM Scale Out Network Attached Storage 1.3.2 1-20
IBM Scale Out Network Attached Storage 1.3.2
IBM Scale Out Network Attached Storage 1.3.1
IBM Scale Out Network Attached Storage 1.4.3.2
IBM Scale Out Network Attached Storage 1.4.3.1
IBM Scale Out Network Attached Storage 1.4.3.0
IBM Scale Out Network Attached Storage 1.4.2.1
IBM Scale Out Network Attached Storage 1.4.2.0
IBM Scale Out Network Attached Storage 1.4.1.0
IBM Scale Out Network Attached Storage 1.3.2.3
IBM Scale Out Network Attached Storage 1.3.2.2
IBM Scale Out Network Attached Storage 1.3.0.5
IBM Scale Out Network Attached Storage 1.3.0.4
IBM Scale Out Network Attached Storage 1.3.0.0
IBM Rational ClearCase 8.0.1
IBM Rational ClearCase 8.0 7
IBM Rational ClearCase 8.0 3
IBM Rational ClearCase 8.0 2
IBM Rational ClearCase 8.0 1
IBM Rational ClearCase 7.1.2 8
IBM Rational ClearCase 7.1.2 7
IBM Rational ClearCase 7.1.2 6
IBM Rational ClearCase 7.1.2 5
IBM Rational ClearCase 7.1.2 4
IBM Rational ClearCase 7.1.2 3
IBM Rational ClearCase 7.1.2 12
IBM Rational ClearCase 7.1.2 11
IBM Rational ClearCase 7.1.2 10
IBM Rational ClearCase 7.1.2 1
IBM Rational ClearCase 7.1.2
IBM Rational ClearCase 7.1.1 9
IBM Rational ClearCase 7.1.1 8
IBM Rational ClearCase 7.1.1 7
IBM Rational ClearCase 7.1.1 6
IBM Rational ClearCase 7.1.1 3
IBM Rational ClearCase 7.1.1 2
IBM Rational ClearCase 7.1.1 1
IBM Rational ClearCase 7.1.1
IBM Rational ClearCase 8.0.1.2
IBM Rational ClearCase 8.0.1.1
IBM Rational ClearCase 8.0.0.9
IBM Rational ClearCase 8.0.0.8
IBM Rational ClearCase 8.0.0.6
IBM Rational ClearCase 8.0.0.5
IBM Rational ClearCase 8.0.0.4
IBM Rational ClearCase 8.0.0
IBM Rational ClearCase 7.1.2.9
IBM Rational ClearCase 7.1.2.2
IBM Rational ClearCase 7.1.1.5
IBM Rational ClearCase 7.1.1.4
IBM Netcool/System Service Monitor 4.0.1 FP1
IBM Netcool/System Service Monitor 4.0.0 Fix Pack 14
IBM InfoSphere Balanced Warehouse D5100
IBM InfoSphere Balanced Warehouse C4000
IBM InfoSphere Balanced Warehouse C3000
IBM Flex System Platform Agent 1.3.1
IBM Flex System Manager 1.2.1
IBM Flex System Manager 1.2
IBM Flex System Manager 1.3.1
IBM Flex System Manager 1.3.0.1
IBM Flex System Manager 1.3.0
IBM Flex System Common Agent 1.3.1
IBM AIX 7.1
IBM AIX 6.1
IBM AIX 5.3
HP System Management Homepage 7.2.2
HP System Management Homepage 7.1.2
HP System Management Homepage 7.3.1
HP System Management Homepage 7.3
HP System Management Homepage 7.2.1
HP System Management Homepage 7.2
Gentoo Linux
FreeBSD FreeBSD 10.0-BETA
FreeBSD Freebsd 10.0
FreeBSD FreeBSD 10
F5 BIG-IP PEM 11.5.1
F5 BIG-IP PEM 11.5
F5 BIG-IP LTM 11.5.1
F5 BIG-IP Link Controller 11.5.1
F5 BIG-IP Link Controller 11.5
F5 BIG-IP GTM 11.5.1
F5 BIG-IP GTM 11.5
F5 BIG-IP ASM 11.5.1
F5 BIG-IP ASM 11.5
F5 BIG-IP APM 11.5.1
F5 BIG-IP APM 11.5.0
F5 BIG-IP Analytics 11.5.1
F5 BIG-IP AFM 11.5.1
F5 BIG-IP AFM 11.5
F5 BIG-IP AAM 11.5.1
F5 BIG-IP AAM 11.5
F5 ARX 6.4
F5 ARX 6.3
F5 ARX 6.2
F5 ARX 6.1.1
F5 ARX 6.1
F5 ARX 6.0
Electric Sheep Fencing LLC pfSense 2.1
Debian Linux 6.0 sparc
Debian Linux 6.0 s/390
Debian Linux 6.0 powerpc
Debian Linux 6.0 mips
Debian Linux 6.0 ia-64
Debian Linux 6.0 ia-32
Debian Linux 6.0 arm
Debian Linux 6.0 amd64
CentOS CentOS 6
Avaya one-X Client Enablement Services 6.2
Avaya one-X Client Enablement Services 6.1.2
Avaya one-X Client Enablement Services 6.1.1
Avaya one-X Client Enablement Services 6.1 SP2
Avaya one-X Client Enablement Services 6.1
Avaya one-X Client Enablement Services 6.0
Avaya IP Office Server Edition 9.0
Avaya IP Office Server Edition 8.1
Avaya IP Office Server Edition 8.0
Avaya IP Office Application Server 9.0
Avaya CMS R17 R3
Avaya CMS r17
Avaya CMS R16 R6
Avaya CMS R16 R5
Avaya CMS R16
Avaya Aura Session Manager 6.3.1
Avaya Aura Session Manager 6.2.1
Avaya Aura Session Manager 6.1.5
Avaya Aura Session Manager 6.1.3
Avaya Aura Session Manager 6.1.2
Avaya Aura Session Manager 6.1.1
Avaya Aura Session Manager 6.0.1
Avaya Aura Session Manager 6.3
Avaya Aura Session Manager 6.2.3
Avaya Aura Session Manager 6.2.2
Avaya Aura Session Manager 6.2 SP1
Avaya Aura Session Manager 6.2
Avaya Aura Session Manager 6.1 SP2
Avaya Aura Session Manager 6.1 Sp1
Avaya Aura Session Manager 6.1
Avaya Aura Session Manager 6.0.2
Avaya Aura Session Manager 6.0 SP1
Avaya Aura Session Manager 6.0
Avaya Aura Session Manager 5.2.4
Avaya Aura Session Manager 5.2.1
Avaya Aura Session Manager 5.2 SP2
Avaya Aura Session Manager 5.2 SP1
Avaya Aura Session Manager 5.2
Avaya Aura Session Manager 5.0
Avaya Aura Experience Portal 6.0.2
+ Avaya Communication Manager Server DEFINITY Server SI/CS
+ Avaya Communication Manager Server S8100
+ Avaya Communication Manager Server S8300
+ Avaya Communication Manager Server S8500
+ Avaya Communication Manager Server S8700
Avaya Aura Experience Portal 6.0.1
Avaya Aura Experience Portal 7.0
Avaya Aura Experience Portal 6.0 SP2
+ Avaya Communication Manager Server DEFINITY Server SI/CS
+ Avaya Communication Manager Server S8100
+ Avaya Communication Manager Server S8300
+ Avaya Communication Manager Server S8500
+ Avaya Communication Manager Server S8700
Avaya Aura Experience Portal 6.0 SP1
Avaya Aura Experience Portal 6.0
Avaya Aura Collaboration Environment 2.0
Not Vulnerable: Puppetlabs Puppet 3.1.2
Oracle Solaris 11.1.20.5.0
IBM Storwize V7000 Unified 1.4.3 3
HP System Management Homepage 7.3.2
HP System Management Homepage 7.2.3
HP System Management Homepage 7.3.2.1(B)
Electric Sheep Fencing LLC pfSense 2.1.1
Avaya CMS R17 R4
Avaya CMS R16.3 R7

Discussion

OpenSSL DTLS Implementations Man in the Middle Multiple Security Bypass Vulnerabilities

OpenSSL is prone to multiple security-bypass vulnerabilities.

Successfully exploiting these issues may allow attackers to obtain sensitive information by conducting a man-in-the-middle attack. This may lead to other attacks.

OpenSSL versions 0.9.8y, and 1.0.0 through 1.0.1e are vulnerable.

Exploit / POC

OpenSSL DTLS Implementations Man in the Middle Multiple Security Bypass Vulnerabilities

An attacker may use readily available tools to exploit these issues.

Solution / Fix

OpenSSL DTLS Implementations Man in the Middle Multiple Security Bypass Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

References

OpenSSL DTLS Implementations Man in the Middle Multiple Security Bypass Vulnerabilities

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report