SSL: Key Renegotiation

This protocol anomaly triggers when it detects SSL renegotiation. SSL renegotiation is a new SSL handshake in an established SSL session (with the existing tcp connection). It is encrypted and sent over an existing SSL session. Renegotiation is useful when either/both of the participants want to use different set of keys or hash algorithms and for client authentication over secure connections. According to the 2009 OpenSSL source change log (11/05/2009): Disabling renegotiation completely fixes a severe security problem (CVE-2009-3555), but at the cost of breaking all renegotiations.

Extended Description

Multiple vendors' TLS protocol implementations are prone to a security vulnerability related to the session-renegotiation process. Successful exploits of this issue may allow attackers to perform limited man-in-the-middle attacks against vulnerable applications. Note that this issue does not allow attackers to decrypt encrypted data.

Affected Products

Cisco wireless_lan_control,Sun java_system_web_server,Opera_software opera_web_browser

References

CVE: CVE-2009-3555

URL: http://groups.google.com/group/mailing.openssl.cvs/browse_thread/thread/8fe14155142cc40d?pli=1 http://isc.sans.org/diary.html?storyid=7543

Short Name

SSL:AUDIT:KEY-RENEGOTIATION

Severity

Minor

Recommended

True

Recommended Action

None

SSL: Key Renegotiation

Extended Description

Affected Products

References

Found a potential security threat?