=====================================================================
                                   CERT-Renater

                        Note d'Information No. 2009/VULN267
_____________________________________________________________________

DATE                      : 30/06/2009

HARDWARE PLATFORM(S)      : /

OPERATING SYSTEM(S)       : AIX versions 5.2, 5.3, 6.1 running OpenSSL.

======================================================================
http://aix.software.ibm.com/aix/efixes/security/ssl_advisory.asc
______________________________________________________________________

IBM SECURITY ADVISORY

First Issued: Mon Jun 29 10:21:51 CDT 2009

The most recent version of this document is available here:

http://aix.software.ibm.com/aix/efixes/security/ssl_advisory.asc
or
ftp://aix.software.ibm.com/aix/efixes/security/ssl_advisory.asc

                           VULNERABILITY SUMMARY

VULNERABILITY:   AIX OpenSSL DTLS remote denial of service

PLATFORMS:       AIX 5.2, 5.3, 6.1

SOLUTION:        Apply the fix as described below.

THREAT:          See below

CERT VU Number:  n/a
CVE Numbers:     CVE-2009-1377, CVE-2009-1378, CVE-2009-1379

                           DETAILED INFORMATION

I. DESCRIPTION

    Multiple vulnerabilities have been identified in OpenSSL, which
    could be exploited by remote attackers to cause a denial of
    service.  IBM is fixing these security flaws in the AIX openssl
    0.9.8.840 for AIX 5.3 and 6.1 and 0.9.8.804 for AIX 5.2 packages
    which are based on OpenSSL 0.9.8h

    The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k
    and earlier 0.9.8 versions allows remote attackers to cause a
    denial of service (memory consumption) via a large series of
    "future epoch" DTLS records that are buffered in a queue, aka
    "DTLS record buffer limitation bug." (CVE-2009-1377)

    Multiple memory leaks in the dtls1_process_out_of_seq_message
    function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8
    versions allow remote attackers to cause a denial of service
    (memory consumption) via DTLS records that (1) are duplicates or
    (2) have sequence numbers much greater than current sequence
    numbers, aka "DTLS fragment handling memory leak." (CVE-2009-1378)

    Use-after-free vulnerability in the
    dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in
    OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of
    service (openssl s_client crash) and possibly have unspecified
    other impact via a DTLS packet, as demonstrated by a packet from a
    server that uses a crafted server certificate. (CVE-2009-1379)

II. PLATFORM VULNERABILITY ASSESSMENT

    To determine if your system is vulnerable, execute the following
    command:

    lslpp -L openssl.base

    The following fileset levels are vulnerable:

    AIX 6.1: all versions less than 0.9.8.840
    AIX 5.3: all versions less than 0.9.8.840
    AIX 5.2: all versions less than 0.9.8.804

    IMPORTANT: If AIX OpenSSH is in use, it must be updated to version
    5.0 when updating to OpenSSL 0.9.8.840 or 0.9.8.804

    AIX OpenSSH can be downloaded from:

    http://sourceforge.net/projects/openssh-aix

III. FIXES

    A fix is available, and it can be downloaded from:

    https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp

    To extract the fixes from the tar file:

    zcat openssl.0.9.8.840-AIX5.3_6.1.tar.Z | tar xvf -
    or
    zcat openssl.0.9.8.804-AIX-5.2.tar.Z | tar xvf -

    IMPORTANT: If possible, it is recommended that a mksysb backup
    of the system be created.  Verify it is both bootable and
    readable before proceeding.

    To preview the fix installation:

    installp -apYd . openssl

    To install the fix package:

    installp -aXYd . openssl

IV. WORKAROUNDS

    There are no workarounds.

V. CONTACT INFORMATION

    If you would like to receive AIX Security Advisories via email,
    please visit:

        http://www.ibm.com/systems/support

    and click on the "My notifications" link.

    To view previously issued advisories, please visit:

        http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd

    Comments regarding the content of this announcement can be
    directed to:

        security-alert@austin.ibm.com

    To obtain the PGP public key that can be used to communicate
    securely with the AIX Security Team you can either:

        A. Download the key from our web page:

  http://www.ibm.com/systems/resources/systems_p_os_aix_security_pgpkey.txt

        B. Download the key from a PGP Public Key Server. The key ID is:

            0xADA6EB4D

    Please contact your local IBM AIX support center for any
    assistance.

    eServer is a trademark of International Business Machines
    Corporation.  IBM, AIX and pSeries are registered trademarks of
    International Business Machines Corporation.  All other trademarks
    are property of their respective holders.

VI. ACKNOWLEDGEMENTS

    These vulnerabilites were reported by Daniel Mentz and Stephen
    Henson.

======================================================================

          =========================================================
          Les serveurs de référence du CERT-Renater
          http://www.urec.fr/securite
          http://www.cru.fr/securite
          http://www.renater.fr
          =========================================================
          + CERT-RENATER          | tel : 01-53-94-20-44          +
          + 151 bd de l'Hopital   | fax : 01-53-94-20-41          +
          + 75013 Paris           | email: certsvp@renater.fr     +
          =========================================================