BID:9590

Apache-SSL Client Certificate Forging Vulnerability

Info

Apache-SSL Client Certificate Forging Vulnerability

Bugtraq ID:	9590
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 06 2004 12:00AM
Updated:	Feb 06 2004 12:00AM
Credit:	Discovery of this vulnerability has been credited to Wietse Venema.
Vulnerable:	Apache-SSL Apache-SSL 1.47 Apache-SSL Apache-SSL 1.46 + Apache Apache 1.3.22 Apache-SSL Apache-SSL 1.45 + Apache Apache 1.3.22 Apache-SSL Apache-SSL 1.44 + Apache Apache 1.3.22 Apache-SSL Apache-SSL 1.42 + Apache Apache 1.3.19 + Apache Apache 1.3.14 Apache-SSL Apache-SSL 1.41 + Apache Apache 1.3.12 Apache-SSL Apache-SSL 1.40 + Apache Apache 1.3.12 Apache-SSL Apache-SSL 1.39 + Apache Apache 1.3.12 Apache-SSL Apache-SSL 1.3.28 +1.52

Not Vulnerable:	Apache-SSL Apache-SSL 1.3.29 +1.53

Discussion

Apache-SSL Client Certificate Forging Vulnerability

Apache-SSL has been reported to be prone to a vulnerability. The issue exists when Apache-SSL is configured in a specific manner. It has been reported that a server possessing the aforementioned configuration may provide a conduit that will allow a remote attacker to forge a valid client certificate.

Exploit / POC

Apache-SSL Client Certificate Forging Vulnerability

There is no exploit required.

Solution / Fix

Apache-SSL Client Certificate Forging Vulnerability

Solution:
The vendor has released an upgrade to address this issue.

Apache-SSL Apache-SSL 1.3.28 +1.52