CVE-2009-3555
published 2009-11-09CVE-2009-3555: The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP…
PriorityP187critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
ITWEXPLOITVulnCheck KEVInitial access
Exploited in the wild
EPSS
87.26%
99.7th percentile
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Affected
59 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | http_server | <= 2.2.14 | — |
| apsis | pound | >= 0 < 2.6-6.1 | 2.6-6.1 |
| apsis | pound | >= 0 < 2.6-6.1 | 2.6-6.1 |
| apsis | pound | >= 0 < 2.6-6.1 | 2.6-6.1 |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| citrix | online_plug-in_for_mac | <= 10.0 | — |
| citrix | online_plug-in_for_windows | <= 11.2 | — |
| citrix | online_plug-in_for_windows | — | — |
| citrix | online_plug-in_for_windows | — | — |
| citrix | receiver_for_iphone | <= 1.0 | — |
| citrix | xenapp | — | — |
| citrix | xendesktop | — | — |
| debian | apache2 | < apache2 2.2.14-2 (bookworm) | apache2 2.2.14-2 (bookworm) |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | lighttpd | < apache2 2.2.14-2 (bookworm) | apache2 2.2.14-2 (bookworm) |
| debian | nginx | < apache2 2.2.14-2 (bookworm) | apache2 2.2.14-2 (bookworm) |
Detection & IOCsextracted from sources · hover to see the quote
bytes↗
\x16\x03\x01\x00\x04\x00\x00\x00\x00
bytes↗
\x15\x03\x01\x00\x02\x00\x46
- →Detect TLS renegotiation MitM attack by monitoring for a TLS ClientHello message arriving over an already-established (encrypted) TLS channel — the PoC injects the victim's ClientHello inside an existing sslsock session via send_encapsulated(), which is anomalous in normal TLS flows. ↗
- →Alert on TLS Hello Request records (handshake type 0x00) sent by a server mid-session, as the PoC uses send_hello_request() to trigger renegotiation on the victim side. ↗
- →Flag TLS connections where a ChangeCipherSpec (record type 0x14) is observed from the client before the server has sent its own ChangeCipherSpec — indicative of the MitM handshake splicing technique used in this exploit. ↗
- →Detect the attack by identifying a proxy/listener on port 8443 (default in the PoC) that performs TLS termination and re-initiates a new TLS handshake to the real server, injecting attacker-controlled plaintext before forwarding the victim's ClientHello. ↗
- →The attacker must be network-adjacent (MitM position) to the TLS client or server; detection should focus on ARP spoofing, rogue gateway, or unexpected TCP session interception events co-occurring with TLS renegotiation. ↗
- →Monitor for SSLv2 ClientHello fallback from clients (record layer high-bit set in first byte), which the PoC explicitly handles and which may indicate a downgrade attempt or tool fingerprint. ↗
- →The PoC uses the tlslite Python library; presence of tlslite imports combined with custom TLS record manipulation in process memory or on disk may indicate attacker tooling. ↗
- →Cisco confirmed that proof-of-concept code exploiting this vulnerability is publicly available; correlate IDS alerts for TLS renegotiation anomalies with OpenSSL version checks — unpatched OpenSSL instances are confirmed vulnerable. ↗
- →The core attack primitive is injection of arbitrary plaintext at the start of a victim's authenticated session; detect by inspecting application-layer logs for unexpected prefixed data (e.g., rogue HTTP request lines) appearing before the legitimate client request on the server side. ↗
- ·wget attempts SSLv2 ClientHello by default, which the PoC handles but may alter exploit behavior compared to TLS 1.0/1.1 clients. ↗
- ·The --one-shot flag in the PoC causes it to only inject data on the first connection and forward all subsequent connections transparently, meaning repeated exploitation requires re-running the tool. ↗
- ·The attacker cannot decrypt or view the contents of the hijacked session — only data injection at session start is possible, limiting the attack to request smuggling or credential abuse scenarios. ↗
- ·The mitigation (renegotiation extension) is only effective when both client and server support it; the Ubuntu/NSS advisory notes the update 'will use it when the server supports it', meaning mixed environments remain partially exposed. ↗
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:P
osv5.8MEDIUM
vulncheck5.8MEDIUM
vendor_cisco5.8MEDIUM
vendor_debian5.8MEDIUM
vendor_redhat5.8MEDIUM
vendor_ubuntu5.8MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Mitsubishi Electric Air Conditioning Systems
cisa_ics·2022-06-20
Mitsubishi Electric Air Conditioning Systems
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Mitsubishi Electric Air Conditioning Systems
Last RevisedJune 20, 2022
Alert CodeICSA-22-160-01
## 1. EXECUTIVE SUMMARY
- CVSS v3 7.5
- ATTENTION: Exploitable remotely
- Vendor: Mitsubishi Electric
- Equipment: Air Conditioning Systems
- Vulnerabilities: Use of a Broken or Risky Cryptographic Algorithm, Exposure of Sensitive Information to an Unauthorized Actor, Channel Accessible by Non-Endpoint
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an attacker to disclose or tamper data in communication between the air conditioning system and
VMware
Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
vendor_vmware·2011-02-10·CVSS 5.0
CVE-2008-0085 [MEDIUM] Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
VMSA-2011-0003: Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX VMware Security Advisory VMware Security Advisory Advisory ID: VMware Security Advisory Synopsis: Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX VMware Security Advisory Issue date: VMware Security Advisory Updated on: VMware Security Advisory CVE numbers:
CVEs: CVE-2008-0085, CVE-2008-0086, CVE-2008-0106, CVE-2008-0107, CVE-2008-3825, CVE-2008-5416, CVE-2009-1384, CVE-2009-2693, CVE-2009-2901, CVE-2009-2902, CVE-2009-3548, CVE-2009-3555, CVE-2009-4308, CVE-2010-0003, CVE-2010-0007, CVE-2010-0008, CVE-2010-0082, CVE-2010-0084, CVE-2010-0085,
Ubuntu
OpenJDK vulnerabilities
vendor_ubuntu·2010-10-28·CVSS 5.8
CVE-2010-3574 [MEDIUM] OpenJDK vulnerabilities
Title: OpenJDK vulnerabilities
Marsh Ray and Steve Dispensa discovered a flaw in the TLS and
SSLv3 protocols. If an attacker could perform a machine-in-the-middle
attack at the start of a TLS connection, the attacker could inject
arbitrary content at the beginning of the user's session. USN-923-1
disabled SSL/TLS renegotiation by default; this update implements
the TLS Renegotiation Indication Extension as defined in RFC 5746,
and thus supports secure renegotiation between updated clients and
servers. (CVE-2009-3555)
It was discovered that the HttpURLConnection class did not validate
request headers set by java applets, which could allow an attacker to
trigger actions otherwise not allowed to HTTP clients. (CVE-2010-3541)
It was discovered that JNDI could leak information that would all
Ubuntu
OpenSSL vulnerability
vendor_ubuntu·2010-09-21
CVE-2009-3555 OpenSSL vulnerability
Title: OpenSSL vulnerability
Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3
protocols. If an attacker could perform a machine-in-the-middle attack at the
start of a TLS connection, the attacker could inject arbitrary content at
the beginning of the user's session. This update adds backported support
for the new RFC5746 renegotiation extension and will use it when both the
client and the server support it.
ATTENTION: After applying this update, a patched server will allow both
patched and unpatched clients to connect, but unpatched clients will not be
able to renegotiate. For more information, please refer to the following:
http://www.openssl.org/docs/ssl/SSL_CTX_set_options.html#SECURE_RENEGOTIATION
Instructions: After a standard system update you need to reboot you
Ubuntu
Apache vulnerability
vendor_ubuntu·2010-09-21·CVSS 5.8
CVE-2009-3555 [MEDIUM] Apache vulnerability
Title: Apache vulnerability
USN-860-1 introduced a partial workaround to Apache that disabled client
initiated TLS renegotiation in order to mitigate CVE-2009-3555. USN-990-1
introduced the new RFC5746 renegotiation extension in openssl, and
completely resolves the issue.
After updating openssl, an Apache server will allow both patched and
unpatched web browsers to connect, but unpatched browsers will not be able
to renegotiate. This update introduces the new SSLInsecureRenegotiation
directive for Apache that may be used to re-enable insecure renegotiations
with unpatched web browsers. For more information, please refer to:
http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslinsecurerenegotiation
Original advisory details:
Marsh Ray and Steve Dispensa discovered a flaw in the TLS and
Ubuntu
NSS vulnerability
vendor_ubuntu·2010-07-23
CVE-2009-3555 NSS vulnerability
Title: NSS vulnerability
Summary: Under certain conditions, an attacker could execute commands in web
applications using your authenticated credentials.
USN-927-1 fixed vulnerabilities in NSS on Ubuntu 9.10. This update provides the
corresponding updates for Ubuntu 9.04.
Original advisory details:
Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3
protocols. If an attacker could perform a machine-in-the-middle attack at the
start of a TLS connection, the attacker could inject arbitrary content at
the beginning of the user's session. This update adds support for the new
new renegotiation extension and will use it when the server supports it.
Instructions: After a standard system upgrade you need to restart your session to effect
the necessary changes.
Ubuntu
nss vulnerability
vendor_ubuntu·2010-06-29
CVE-2009-3555 nss vulnerability
Title: nss vulnerability
Summary: Under certain conditions, an attacker could execute commands in web
applications using your authenticated credentials.
USN-927-1 fixed vulnerabilities in nss in Ubuntu 9.10. This update provides
the corresponding updates for Ubuntu 8.04 LTS.
Original advisory details:
Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3
protocols. If an attacker could perform a machine-in-the-middle attack at the
start of a TLS connection, the attacker could inject arbitrary content at
the beginning of the user's session. This update adds support for the new
new renegotiation extension and will use it when the server supports it.
Instructions: After a standard system upgrade you need to restart your session to effect
the necessary changes.
Ubuntu
NSS vulnerability
vendor_ubuntu·2010-04-09
CVE-2009-3555 NSS vulnerability
Title: NSS vulnerability
Summary: NSS vulnerability
Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3
protocols. If an attacker could perform a machine-in-the-middle attack at the
start of a TLS connection, the attacker could inject arbitrary content at
the beginning of the user's session. This update adds support for the new
new renegotiation extension and will use it when the server supports it.
Instructions: After a standard system upgrade you need to restart your session to effect
the necessary changes.
Ubuntu
OpenJDK vulnerabilities
vendor_ubuntu·2010-04-07·CVSS 5.8
CVE-2009-3555 [MEDIUM] OpenJDK vulnerabilities
Title: OpenJDK vulnerabilities
Summary: OpenJDK vulnerabilities
Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3
protocols. If an attacker could perform a machine-in-the-middle attack at the
start of a TLS connection, the attacker could inject arbitrary content
at the beginning of the user's session. (CVE-2009-3555)
It was discovered that Loader-constraint table, Policy/PolicyFile,
Inflater/Deflater, drag/drop access, and deserialization did not correctly
handle certain sensitive objects. If a user were tricked into running a
specially crafted applet, private information could be leaked to a remote
attacker, leading to a loss of privacy. (CVE-2010-0082, CVE-2010-0084,
CVE-2010-0085, CVE-2010-0088, CVE-2010-0091, CVE-2010-0094)
It was discovered that AtomicReferenceAr
BSD
FreeBSD-SA-09:15.ssl: SSL protocol flaw
bsd_advisories·2009-12-03·CVSS 5.8
CVE-2009-3555 [MEDIUM] FreeBSD-SA-09:15.ssl: SSL protocol flaw
FreeBSD-SA-09:15.ssl Security Advisory
The FreeBSD Project
Topic: SSL protocol flaw
Category: contrib
Module: openssl
Announced: 2009-12-03
Credits: Marsh Ray, Steve Dispensa
Affects: All supported versions of FreeBSD.
Corrected: 2009-12-03 09:18:40 UTC (RELENG_8, 8.0-STABLE)
2009-12-03 09:18:40 UTC (RELENG_8_0, 8.0-RELEASE-p1)
2009-12-03 09:18:40 UTC (RELENG_7, 7.2-STABLE)
2009-12-03 09:18:40 UTC (RELENG_7_2, 7.2-RELEASE-p5)
2009-12-03 09:18:40 UTC (RELENG_7_1, 7.1-RELEASE-p9)
2009-12-03 09:18:40 UTC (RELENG_6, 6.4-STABLE)
2009-12-03 09:18:40 UTC (RELENG_6_4, 6.4-RELEASE-p8)
2009-12-03 09:18:40 UTC (RELENG_6_3, 6.3-RELEASE-p14)
CVE Name: CVE-2009-3555
For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
fo
Ubuntu
Apache vulnerabilities
vendor_ubuntu·2009-11-19·CVSS 2.6
CVE-2009-3094 [LOW] Apache vulnerabilities
Title: Apache vulnerabilities
Summary: Apache vulnerabilities
Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3
protocols. If an attacker could perform a machine-in-the-middle attack at the
start of a TLS connection, the attacker could inject arbitrary content at
the beginning of the user's session. The flaw is with TLS renegotiation and
potentially affects any software that supports this feature. Attacks
against the HTTPS protocol are known, with the severity of the issue
depending on the safeguards used in the web application. Until the TLS
protocol and underlying libraries are adjusted to defend against this
vulnerability, a partial, temporary workaround has been applied to Apache
that disables client initiated TLS renegotiation. This update does not
protect against
Citrix
CVE-2009-3936: Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiv
vendor_citrix·2009-11-13·CVSS 5.8
CVE-2009-3936 [MEDIUM] CWE-310 CVE-2009-3936: Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiv
CVE-2009-3936: Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/TLS server and bypass authentication via a crafted certificate, a different vulnerability than CVE-2009-3555.
Cisco
Transport Layer Security Renegotiation Vulnerability
vendor_cisco·2009-11-09
CVE-2009-3555 Transport Layer Security Renegotiation Vulnerability
Transport Layer Security Renegotiation Vulnerability
An industry-wide vulnerability exists in the Transport Layer Security
(TLS) protocol that could impact any Cisco product that uses any version of TLS
and SSL. The vulnerability exists in how the protocol handles session
renegotiation and exposes users to a potential man-in-the-middle attack.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20091109-tls.
Cisco
Transport Layer Security Renegotiation Remote Man-in-the-Middle Attack Vulnerability
vendor_cisco·2009-11-05·CVSS 5.8
CVE-2009-3555 [MEDIUM] CWE-20 Transport Layer Security Renegotiation Remote Man-in-the-Middle Attack Vulnerability
Transport Layer Security Renegotiation Remote Man-in-the-Middle Attack Vulnerability
Multiple Transport Layer Security (TLS) implementations contain a vulnerability when renegotiating a TLS session that could allow an unauthenticated, remote attacker to conduct a man-in-the-middle attack.
The vulnerability exists during a TLS renegotiation process. If an attacker can intercept traffic from a client to a TLS server, the attacker could stage a rogue TLS server to intercept that traffic and appear to authenticate the client to what the client thinks is the desired TLS server. The attacker is then able to authenticate to the legitimate TLS server and thus stage a man-in-the-middle attack. However, the attacker would not be able to view the contents of the session and would only be able to in
Red Hat
TLS: MITM attacks via session renegotiation
vendor_redhat·2009-11-05·CVSS 5.8
CVE-2009-3555 [MEDIUM] CWE-300 TLS: MITM attacks via session renegotiation
TLS: MITM attacks via session renegotiation
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Statement
Debian
CVE-2009-3555: apache2 - The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Micr...
vendor_debian·2009·CVSS 5.8
CVE-2009-3555 [MEDIUM] CVE-2009-3555: apache2 - The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Micr...
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Scope: local
bookworm: resolved (fixed in 2.2.14-2)
bul
Cisco
Transport Layer Security Renegotiation Vulnerability
vendor_cisco
CVE-2009-3555 Transport Layer Security Renegotiation Vulnerability
CVE-2009-3555: Transport Layer Security Renegotiation Vulnerability
An industry-wide vulnerability exists in the Transport Layer Security (TLS) protocol that could impact any Cisco product that uses any version of TLS and SSL. The vulnerability exists in how the protocol handles session renegotiation and exposes users to a potential man-in-the-middle attack. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20091109-tls .
Bug IDs: CSCtd00730, CSCtd00816, CSCtd01467, CSCtd01474, CSCtd01491
VulDB
EMC Data Protection Manager Appliance 3.2.4.1/3.5 SSL/TLS Handshake cryptographic issue (VU#120541 / EDB-10579)
vuldb·2026-05-27·CVSS 9.8
CVE-2009-3555 [CRITICAL] EMC Data Protection Manager Appliance 3.2.4.1/3.5 SSL/TLS Handshake cryptographic issue (VU#120541 / EDB-10579)
A vulnerability categorized as critical has been discovered in EMC Data Protection Manager Appliance 3.2.4.1/3.5. This vulnerability affects unknown code of the component SSL/TLS Handshake Handler. Executing a manipulation can lead to cryptographic issues.
This vulnerability appears as CVE-2009-3555. The attack may be performed from remote. In addition, an exploit is available.
It is advisable to upgrade the affected component.
VulDB
Juniper Secure Access 6.3R6 SSL cryptographic issue (KB17534 / VU#120541)
vuldb·2026-05-27·CVSS 9.8
CVE-2009-3555 [CRITICAL] Juniper Secure Access 6.3R6 SSL cryptographic issue (KB17534 / VU#120541)
A vulnerability classified as problematic has been found in Juniper Secure Access 6.3R6. This issue affects some unknown processing of the component SSL Handler. This manipulation causes cryptographic issues.
This vulnerability is registered as CVE-2009-3555. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
It is recommended to upgrade the affected component.
VulDB
IBM DB2 Universal Database 9.x Data cryptographic issue (VU#120541 / EDB-10579)
vuldb·2026-05-27·CVSS 9.8
CVE-2009-3555 [CRITICAL] IBM DB2 Universal Database 9.x Data cryptographic issue (VU#120541 / EDB-10579)
A vulnerability, which was classified as problematic, was found in IBM DB2 Universal Database 9.x. This issue affects some unknown processing of the component Data Handler. Such manipulation leads to cryptographic issues.
This vulnerability is listed as CVE-2009-3555. The attack must be carried out from within the local network. In addition, an exploit is available.
You should upgrade the affected component.
VulDB
Microsoft Windows TLS/SSL Session TLS/SSL Session Renegotiation cryptographic issue (MS10-049 / VU#120541)
vuldb·2026-05-27·CVSS 9.8
CVE-2009-3555 [CRITICAL] Microsoft Windows TLS/SSL Session TLS/SSL Session Renegotiation cryptographic issue (MS10-049 / VU#120541)
A vulnerability, which was classified as problematic, was found in Microsoft Windows. This affects an unknown part of the component TLS/SSL Session Handler. Such manipulation as part of TLS/SSL Session Renegotiation leads to cryptographic issues.
This vulnerability is referenced as CVE-2009-3555. It is possible to launch the attack remotely. Furthermore, an exploit is available.
You should upgrade the affected component.
GHSA
GHSA-4j5r-cf8c-49vp: Unspecified vulnerability in Citrix Online Plug-in for Windows 11
ghsa_unreviewed·2022-05-02·CVSS 5.8
CVE-2009-3936 [MEDIUM] GHSA-4j5r-cf8c-49vp: Unspecified vulnerability in Citrix Online Plug-in for Windows 11
Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/TLS server and bypass authentication via a crafted certificate, a different vulnerability than CVE-2009-3555.
OSV
Apache Tomcat affected by vulnerability in TLS and SSL protocol
osv·2022-05-02
CVE-2009-3555 [MEDIUM] Apache Tomcat affected by vulnerability in TLS and SSL protocol
Apache Tomcat affected by vulnerability in TLS and SSL protocol
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogu
GHSA
Apache Tomcat affected by vulnerability in TLS and SSL protocol
ghsa·2022-05-02
CVE-2009-3555 [MEDIUM] CWE-295 Apache Tomcat affected by vulnerability in TLS and SSL protocol
Apache Tomcat affected by vulnerability in TLS and SSL protocol
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogu
OSV
CVE-2009-3555: The TLS protocol, and the SSL protocol 3
osv·2009-11-09·CVSS 5.8
CVE-2009-3555 [MEDIUM] CVE-2009-3555: The TLS protocol, and the SSL protocol 3
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
VulnCheck
Apache HTTP Server Improper Certificate Validation
vulncheck·2009·CVSS 5.8
CVE-2009-3555 [MEDIUM] Apache HTTP Server Improper Certificate Validation
Apache HTTP Server Improper Certificate Validation
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Af
No detection rules found.
Exploit-DB
TLS - Renegotiation
exploitdb·2009-12-21·CVSS 5.8
CVE-2009-3555 [MEDIUM] TLS - Renegotiation
TLS - Renegotiation
---
#!/usr/bin/env python
######################################
# #
# RedTeam Pentesting GmbH #
# [email protected] #
# http://www.redteam-pentesting.de #
# #
######################################
# PoC exploit for the TLS renegotiation vulnerability (CVE-2009-3555)
# License
# -------
# CC-BY-SA http://creativecommons.org/licenses/by-sa/3.0/
# Timeline
# --------
# 2009-12-21 initial public release
# Known Issues
# ------------
# Firefox: if it fails connecting to a TLS site too often, falls back to
# issuing SSLv2 ClientHello only until browser is restarted
#
# wget: attempts SSLv2 ClientHello by default
# References
# ----------
# http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555
# http://www.phonefactor.com/sslgap
# http://www.extende
Exploit-DB
Mozilla NSS - NULL Character CA SSL Certificate Validation Security Bypass
exploitdb·2009-11-10
CVE-2009-3555 Mozilla NSS - NULL Character CA SSL Certificate Validation Security Bypass
Mozilla NSS - NULL Character CA SSL Certificate Validation Security Bypass
---
source: https://www.securityfocus.com/bid/35888/info
Mozilla Network Security Services (NSS) is prone to a security-bypass vulnerability because it fails to properly validate the domain name in a signed CA certificate, allowing attackers to substitute malicious SSL certificates for trusted ones.
The NSS library is used by a number of applications, including Mozilla Firefox, Thunderbird, and SeaMonkey.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
NOTE (August 6, 2009): This BID had included a similar issue in Fetchmail, but that issue is now documented in BID 35951 (Fetchmail NULL Character CA SSL
arXiv
Current Affairs: A Security Measurement Study of CCS EV Charging Deployments
arxiv_fulltext·2025-02-03
Current Affairs: A Security Measurement Study of CCS EV Charging Deployments
Current Affairs:\ Security Measurement Study of CCS EV Charging Deployments
Marcell Szakály
University of Oxford
Sebastian Köhler
University of Oxford
Ivan Martinovic
University of Oxford
textblock* (1.9cm,26cm)
Original Publication by USENIX in Proceedings of the 34th USENIX Security Symposium.
textblock*
## Abstract
Since its introduction in 2012, the Combined Charging System (CCS) has emerged as the leading technology for EV fast charging in Europe, North America and parts of Asia.
The charging communication of CCS is defined by the ISO 15118 standards, which have been improved over the years.
Most notably, in 2014, important security features such as Transport Layer Security (TLS) and usability enhancements such as Plug and Charge were introduced.
In this paper, we conduct t
RFC
Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
rfc·2022-11-01
Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Internet Engineering Task Force (IETF) Y. Sheffer
Request for Comments: 9325 Intuit
BCP: 195 P. Saint-Andre
Obsoletes: 7525 Independent
Updates: 5288, 6066 T. Fossati
Category: Best Current Practice ARM Limited
ISSN: 2070-1721 November 2022
Recommendations for Secure Use of Transport Layer Security (TLS) and
Datagram Transport Layer Security (DTLS)
Abstract
Transport Layer Security (TLS) and Datagram Transport Layer Security
(DTLS) are used to protect data exchanged over a wide range of
application protocols and can also form the basis for secure
transport protocols. Over the years, the industry has witnessed
several serious attacks on TLS and DTLS, including attacks on the
most commonly used cipher suites and their modes of operation. This
document provides the latest recommendati
arXiv
Secure by default - the case of TLS
arxiv_fulltext·2017-08-24
Secure by default - the case of TLS
Secure by default -- the case of TLS
Martin Stanek \ 1ex]
Department of Computer Science
Comenius University
@dcs.fmph.uniba.sk
## Abstract
Default configuration of various software applications often neglects security objectives.
We tested the default configuration of TLS in dozen web and application servers.
The results show that ``secure by default'' principle should be adopted more broadly
by developers and package maintainers. In addition, system administrators cannot
rely blindly on default security options.
: TLS, secure defaults, testing.
## Introduction
Security often depends on prudent configuration of software components used in a deployed
system. All necessary security controls and options are there, but one have
to turn them on or simply start using them. Unfortunately
RFC
Summarizing Known Attacks on Transport Layer Security (TLS) and Datagram TLS (DTLS)
rfc·2015-02-01
Summarizing Known Attacks on Transport Layer Security (TLS) and Datagram TLS (DTLS)
Internet Engineering Task Force (IETF) Y. Sheffer
Request for Comments: 7457 Porticor
Category: Informational R. Holz
ISSN: 2070-1721 Technische Universitaet Muenchen
P. Saint-Andre
&yet
February 2015
Summarizing Known Attacks on Transport Layer Security (TLS)
and Datagram TLS (DTLS)
Abstract
Over the last few years, there have been several serious attacks on
Transport Layer Security (TLS), including attacks on its most
commonly used ciphers and modes of operation. This document
summarizes these attacks, with the goal of motivating generic and
protocol-specific recommendations on the usage of TLS and Datagram
TLS (DTLS).
Status of This Memo
This document is not an Internet Standards Track specification; it is
published for informational purposes.
This document is a product of the In
Bugzilla
qpid-cpp: SSL Broker vulnerable to RC4 and Secure Client-Initiated Renegotiation (CVE-2009-3555)
bugzilla·2016-04-13·CVSS 5.8
CVE-2009-3555 [MEDIUM] qpid-cpp: SSL Broker vulnerable to RC4 and Secure Client-Initiated Renegotiation (CVE-2009-3555)
qpid-cpp: SSL Broker vulnerable to RC4 and Secure Client-Initiated Renegotiation (CVE-2009-3555)
It was reported that Qpid SSL broker is vulnerable to RC4 and Secure Client-Initiated Renegotiation.
Product bug:
https://bugzilla.redhat.com/show_bug.cgi?id=1325804
Discussion:
Acknowledgments:
Name: Petr Matousek (Red Hat)
HackerOne
TLS1/SSLv3 Renegotiation Vulnerability
hackerone·2014-08-14
TLS1/SSLv3 Renegotiation Vulnerability
TLS1/SSLv3 Renegotiation Vulnerability
URL: http://www.slack.com
Vulnerability description
A flaw in the design of the TLS v. 1/SSL v. 3 (TLS/SSL) handshake process was discovered in 2009, and RFC 5746 (Feb. 2010) was released to update the protocol specification. Since then, most system manufacturers have released patches to fix this flaw. Still, as of June 2011 approximately half of the systems using TLS/SSL on the Internet have not implemented the patches needed to close this security hole. This vulnerability affects the secure transport of HTTP, IMAP, SMTP, and other protocols that rely on TLS/SSL. Industry representatives and security researchers who have looked into the problem note that sites with the TLS patch may still be vulnerable to this attack, known as the TLS renegotiation
Bugzilla
NewSessionTicket handshake message in a resumption handshake replaces cached session's ticket before handshake is finished
bugzilla·2013-10-25·CVSS 5.8
[MEDIUM] NewSessionTicket handshake message in a resumption handshake replaces cached session's ticket before handshake is finished
NewSessionTicket handshake message in a resumption handshake replaces cached session's ticket before handshake is finished
Created attachment 822123
fix-NewSessionTicket.patch
See http://tools.ietf.org/html/rfc5077#section-3.3:
"The client MUST NOT treat the ticket as valid until it has verified the server's Finished message."
This bug affects the case illustrated in figure 2 of RFC 5077, "Message Flow for Abbreviated Handshake Using New Session Ticket," where a NewSessionTicket message is sent during a session resumption, replacing the session ticket for a session already stored in the cache. That session may already be in use by other connections.
I am not sure if or how this bug could be exploited. However, I am not convinced it is unexploitable either, so I am hiding this bug for
Bugzilla
CVE-2011-1473 openssl: DoS via repeated SSL session renegotiations
bugzilla·2011-05-23·CVSS 5.0
CVE-2011-1473 [MEDIUM] CVE-2011-1473 openssl: DoS via repeated SSL session renegotiations
CVE-2011-1473 openssl: DoS via repeated SSL session renegotiations
It was reported [1] that a flaw exists in how openSSL handles SSL renegotiation. Because of the processing power required to handle an SSL/TLS handshake, with renegotiation enabled, a user can send multiple handshakes per second due to the renegotiation request being permitted. This could allow a malicious user to send multiple renegotiation requests and exhaust server resources.
Note that this is not the only way to cause a denial of service on an SSL-enabled service; there are many other ways to accomplish the same thing, this just makes it easier.
What makes this bug even more confusing is that this report is recent, with a 2011 CVE, however the recommended fix in the report is to upgrade to OpenSSL 0.9.8l, which is w
Bugzilla
CVE-2009-3555 TLS: MITM attacks via session renegotiation
bugzilla·2009-11-05·CVSS 5.8
CVE-2009-3555 [MEDIUM] CVE-2009-3555 TLS: MITM attacks via session renegotiation
CVE-2009-3555 TLS: MITM attacks via session renegotiation
Marsh Ray of PhoneFactor has discovered a flaw in the TLS/SSL protocol related to the handling of the session rehandshakes / renegotiations. This flaw can possibly be used in the MITM attacks and allowing an attacker to inject attacker-chosen plain text prefix to the session of the victim.
Further details are available in the "Authentication Gap in TLS Renegotiation" blog post:
http://extendedsubset.com/?p=8
Discussion:
Independent discovery by Martin Rex:
http://www.ietf.org/mail-archive/web/tls/current/msg03928.html
---
Ben Laurie's blog post with proposed change for OpenSSL:
http://www.links.org/?p=780
Note: This workaround disables all renegotiation, so it will break all uses where renegotiation is required and used.
---
Zscaler
Zscaler Provides Advanced Protection for Massive MS Patch
blogs_zscaler
Zscaler Provides Advanced Protection for Massive MS Patch
Provide users with seamless, secure, reliable access to applications and data.
Build and run secure cloud apps, enable zero trust cloud connectivity, and protect workloads from data center to cloud.
Provide zero trust connectivity for IoT and OT devices and secure remote access to OT systems.
Provide zero trust site-to-site connectivity and reliable access to B2B apps for partners.
Industry Report
Zscaler: A Leader in the 2025 Gartner® Magic Quadrant™ for Security Service Edge (SSE)
USE CASES
INDUSTRY & MARKET SOLUTIONS
PARTNERS
TECHNOLOGY PARTNERS
Resource Center
Events & Trainings
Security Research & Services
Tools
Community & Support
CXO REVOLUTIONARIES
Amplifying the voices of real-world digital and zero trust pioneers
Discover how it began and where it’s going
Meet o
Zscaler
Zscaler found Multiple Security Vulnerabilities | 08-10-2010
blogs_zscaler
Zscaler found Multiple Security Vulnerabilities | 08-10-2010
Provide users with seamless, secure, reliable access to applications and data.
Build and run secure cloud apps, enable zero trust cloud connectivity, and protect workloads from data center to cloud.
Provide zero trust connectivity for IoT and OT devices and secure remote access to OT systems.
Provide zero trust site-to-site connectivity and reliable access to B2B apps for partners.
Industry Report
Zscaler: A Leader in the 2025 Gartner® Magic Quadrant™ for Security Service Edge (SSE)
USE CASES
INDUSTRY & MARKET SOLUTIONS
PARTNERS
TECHNOLOGY PARTNERS
Resource Center
Events & Trainings
Security Research & Services
Tools
Community & Support
CXO REVOLUTIONARIES
Amplifying the voices of real-world digital and zero trust pioneers
Discover how it began and where it’s going
Meet o
http://archives.neohapsis.com/archives/bugtraq/2013-11/0120.htmlhttp://blog.g-sec.lu/2009/11/tls-sslv3-renegotiation-vulnerability.htmlhttp://blogs.iss.net/archive/sslmitmiscsrf.htmlhttp://blogs.sun.com/security/entry/vulnerability_in_tls_protocol_duringhttp://clicky.me/tlsvulnhttp://extendedsubset.com/?p=8http://extendedsubset.com/Renegotiating_TLS.pdfhttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01945686http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02436041http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751http://kbase.redhat.com/faq/docs/DOC-20491http://lists.apple.com/archives/security-announce/2010//May/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2010//May/msg00002.htmlhttp://lists.apple.com/archives/security-announce/2010/Jan/msg00000.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-April/039957.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-May/040652.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.htmlhttp://lists.gnu.org/archive/html/gnutls-devel/2009-11/msg00029.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-11/msg00009.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.htmlhttp://marc.info/?l=apache-httpd-announce&m=125755783724966&w=2http://marc.info/?l=bugtraq&m=126150535619567&w=2http://marc.info/?l=bugtraq&m=127128920008563&w=2http://marc.info/?l=bugtraq&m=127419602507642&w=2http://marc.info/?l=bugtraq&m=127557596201693&w=2http://marc.info/?l=bugtraq&m=130497311408250&w=2http://marc.info/?l=bugtraq&m=132077688910227&w=2http://marc.info/?l=bugtraq&m=133469267822771&w=2http://marc.info/?l=bugtraq&m=134254866602253&w=2http://marc.info/?l=bugtraq&m=142660345230545&w=2http://marc.info/?l=cryptography&m=125752275331877&w=2http://openbsd.org/errata45.html#010_opensslhttp://openbsd.org/errata46.html#004_opensslhttp://osvdb.org/60521http://osvdb.org/60972http://osvdb.org/62210http://osvdb.org/65202http://seclists.org/fulldisclosure/2009/Nov/139http://secunia.com/advisories/37291http://secunia.com/advisories/37292http://secunia.com/advisories/37320http://secunia.com/advisories/37383http://secunia.com/advisories/37399http://secunia.com/advisories/37453http://secunia.com/advisories/37501http://secunia.com/advisories/37504http://secunia.com/advisories/37604http://secunia.com/advisories/37640http://secunia.com/advisories/37656http://secunia.com/advisories/37675http://secunia.com/advisories/37859http://secunia.com/advisories/38003http://secunia.com/advisories/38020http://secunia.com/advisories/38056http://secunia.com/advisories/38241http://secunia.com/advisories/38484http://secunia.com/advisories/38687http://secunia.com/advisories/38781http://secunia.com/advisories/39127http://secunia.com/advisories/39136http://secunia.com/advisories/39242http://secunia.com/advisories/39243http://secunia.com/advisories/39278http://secunia.com/advisories/39292http://secunia.com/advisories/39317http://secunia.com/advisories/39461http://secunia.com/advisories/39500http://secunia.com/advisories/39628http://secunia.com/advisories/39632http://secunia.com/advisories/39713http://secunia.com/advisories/39819http://secunia.com/advisories/40070http://secunia.com/advisories/40545http://secunia.com/advisories/40747http://secunia.com/advisories/40866http://secunia.com/advisories/41480http://secunia.com/advisories/41490http://secunia.com/advisories/41818http://secunia.com/advisories/41967http://secunia.com/advisories/41972http://secunia.com/advisories/42377http://secunia.com/advisories/42379http://secunia.com/advisories/42467http://secunia.com/advisories/42724http://secunia.com/advisories/42733http://secunia.com/advisories/42808http://secunia.com/advisories/42811http://secunia.com/advisories/42816http://secunia.com/advisories/43308
+ 497 more references
2009-11-09
Published
Exploited in the wild