NVD Vulnerability Detail

CVE-2016-0704

Summary	An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.
Publication Date	March 2, 2016, 8:59 p.m.
Registration Date	Jan. 26, 2021, 2:04 p.m.
Last Update	Nov. 21, 2024, 11:42 a.m.

CVSS3.0 : MEDIUM
スコア	5.9
Vector	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	高
攻撃に必要な特権レベル(PR)	不要
利用者の関与(UI)	不要
影響の想定範囲(S)	変更なし
機密性への影響(C)	高
完全性への影響(I)	なし
可用性への影響(A)	なし

CVSS2.0 : MEDIUM
Score	4.3
Vector	AV:N/AC:M/Au:N/C:P/I:N/A:N
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	なし
可用性への影響(A)	なし
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:1.0.1j:::::::*
cpe:2.3:a:openssl:openssl:1.0.0n:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.0c:::::::*
cpe:2.3:a:openssl:openssl:1.0.0i:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.1h:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.0m:::::::*
cpe:2.3:a:openssl:openssl:1.0.1c:::::::*
cpe:2.3:a:openssl:openssl:1.0.1g:::::::*
cpe:2.3:a:openssl:openssl:1.0.0h:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.0e:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.0f:::::::*
cpe:2.3:a:openssl:openssl:1.0.0d:::::::*
cpe:2.3:a:openssl:openssl:1.0.0j:::::::*
cpe:2.3:a:openssl:openssl:1.0.0p:::::::*
cpe:2.3:a:openssl:openssl:1.0.1a:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.0o:::::::*
cpe:2.3:a:openssl:openssl:1.0.1d:::::::*
cpe:2.3:a:openssl:openssl:1.0.0k:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta4::::::
cpe:2.3:a:openssl:openssl:1.0.2:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.2:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.1k:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:::::::*
cpe:2.3:a:openssl:openssl:1.0.1b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1e:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta5::::::
cpe:2.3:a:openssl:openssl:1.0.1l:::::::*
cpe:2.3:a:openssl:openssl:1.0.1f:::::::*
cpe:2.3:a:openssl:openssl:1.0.0l:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:::::::*
cpe:2.3:a:openssl:openssl:1.0.0a:::::::*
cpe:2.3:a:openssl:openssl:1.0.0q:::::::*
cpe:2.3:a:openssl:openssl:1.0.1i:::::::*
cpe:2.3:a:openssl:openssl:1.0.0b:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.1:::::::*
cpe:2.3:a:openssl:openssl:1.0.0g:::::::*
cpe:2.3:a:openssl:openssl::::::::		0.9.8ze

Related information, measures and tools

No	URL	タグ
1	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
2	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
3	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html
4	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html
5	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html
6	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html
7	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html
8	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html
9	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html
10	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html
11	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html
12	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html
13	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html
14	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html
15	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html
16	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html
17	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html
18	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html
19	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html
20	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html
21	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html
22	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html
23	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html
24	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html
25	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html
26	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html
27	http://openssl.org/news/secadv/20160301.txt	Vendor Advisory
28	http://openssl.org/news/secadv/20160301.txt	Vendor Advisory
29	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl
30	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl
31	http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
32	http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
33	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
34	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
35	http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
36	http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
37	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
38	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
39	http://www.securityfocus.com/bid/83764
40	http://www.securityfocus.com/bid/83764
41	http://www.securitytracker.com/id/1035133
42	http://www.securitytracker.com/id/1035133
43	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
44	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
45	https://drownattack.com
46	https://drownattack.com
47	https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97
48	https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97
49	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us
50	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us
51	https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168
52	https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168
53	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc
54	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc
55	https://security.gentoo.org/glsa/201603-15
56	https://security.gentoo.org/glsa/201603-15
57	https://www.openssl.org/news/secadv/20160301.txt
58	https://www.openssl.org/news/secadv/20160301.txt

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-200	情報漏えい	https://cwe.mitre.org/data/definitions/200.html

JVN Vulnerability Information

OpenSSL の SSLv2 の実装の s2_srvr.c のオラクル保護メカニズムにおける TLS 暗号文データを解読される脆弱性

Title	OpenSSL の SSLv2 の実装の s2_srvr.c のオラクル保護メカニズムにおける TLS 暗号文データを解読される脆弱性
Summary	OpenSSL の SSLv2 の実装の s2_srvr.c の get_client_master_key 関数のオラクル保護メカニズムは、暗号スイートのエクスポート中に不正な MASTER-KEY バイト数を上書きするため、TLS 暗号文データを解読される脆弱性が存在します。本脆弱性は、CVE-2016-0800 と関連する問題です。
Possible impacts	第三者により、Bleichenbacher RSA パディングオラクルを利用されることで、TLS 暗号文データを解読される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	March 1, 2016, midnight
Registration Date	March 15, 2016, 10:15 a.m.
Last Update	Nov. 21, 2016, 3:32 p.m.

Affected System

OpenSSL Project

OpenSSL 0.9.8zf 未満の 0.9.8

OpenSSL 1.0.0r 未満の 1.0.0

OpenSSL 1.0.1m 未満の 1.0.1

OpenSSL 1.0.2a 未満の 1.0.2

日立

Cosminexus Application Server Enterprise Version 6

Cosminexus Application Server Standard Version 6

Cosminexus Application Server Version 5

Cosminexus Developer Light Version 6

Cosminexus Developer Professional Version 6

Cosminexus Developer Standard Version 6

Cosminexus Developer Version 5

Cosminexus Primary Server Base Version 6

Cosminexus Primary Server Version 6

Hitachi Web Server

Hitachi Web Server - Security Enhancement

uCosminexus Application Server Express

uCosminexus Application Server Standard-R

uCosminexus Application Server Enterprise

uCosminexus Application Server Smart Edition

uCosminexus Application Server Standard

uCosminexus Developer 01

uCosminexus Developer Professional

uCosminexus Developer Professional for Plug-in

uCosminexus Developer Light

uCosminexus Developer Standard

uCosminexus Primary Server Base

uCosminexus Service Architect

uCosminexus Service Platform

uCosminexus Service Platform - Messaging

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2016-0704	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0704
National Vulnerability Database (NVD)
2	CVE-2016-0704	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-0704

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-200	https://jvndb.jvn.jp/ja/cwe/CWE-200.html

ベンダー情報

No	Name	URL
Hitachi Software Vulnerability Information
1	HS16-015	http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS16-015/index.html
OpenSSL Project
2	Harden SSLv2-supporting servers against Bleichenbacher's attack.	https://git.openssl.org/?p=openssl.git;a=commit;h=ae50d8270026edf5b3c7f8aaa0c6677462b33d97
OpenSSL Security Advisory
3	Bleichenbacher oracle in SSLv2 (CVE-2016-0704)	http://openssl.org/news/secadv/20160301.txt
Oracle Technology Network
4	Oracle Linux Bulletin - January 2016	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
5	Oracle Solaris Third Party Bulletin - April 2016	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
6	Oracle Solaris Third Party Bulletin - January 2016	http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
Security Advisories
7	SA40168	https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168
ソフトウェア製品セキュリティ情報
8	HS16-015	http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS16-015/index.html

Change Log

No	Changed Details	Date of change
0	[2016年03月15日] 掲載 [2016年05月27日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新 CVSS による深刻度：内容を更新ベンダ情報：日立 (HS16-015) を追加ベンダ情報：パルスセキュア (SA40168) を追加 [2016年11月21日] ベンダ情報：オラクル (Oracle Linux Bulletin - January 2016) を追加ベンダ情報：オラクル (Oracle Solaris Third Party Bulletin - January 2016) を追加ベンダ情報：オラクル (Oracle Solaris Third Party Bulletin - April 2016) を追加	Feb. 17, 2018, 10:37 a.m.

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:1.0.1j:::::::*
cpe:2.3:a:openssl:openssl:1.0.0n:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.0c:::::::*
cpe:2.3:a:openssl:openssl:1.0.0i:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.1h:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.0m:::::::*
cpe:2.3:a:openssl:openssl:1.0.1c:::::::*
cpe:2.3:a:openssl:openssl:1.0.1g:::::::*
cpe:2.3:a:openssl:openssl:1.0.0h:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.0e:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.0f:::::::*
cpe:2.3:a:openssl:openssl:1.0.0d:::::::*
cpe:2.3:a:openssl:openssl:1.0.0j:::::::*
cpe:2.3:a:openssl:openssl:1.0.0p:::::::*
cpe:2.3:a:openssl:openssl:1.0.1a:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.0o:::::::*
cpe:2.3:a:openssl:openssl:1.0.1d:::::::*
cpe:2.3:a:openssl:openssl:1.0.0k:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta4::::::
cpe:2.3:a:openssl:openssl:1.0.2:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.2:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.1k:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:::::::*
cpe:2.3:a:openssl:openssl:1.0.1b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1e:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta5::::::
cpe:2.3:a:openssl:openssl:1.0.1l:::::::*
cpe:2.3:a:openssl:openssl:1.0.1f:::::::*
cpe:2.3:a:openssl:openssl:1.0.0l:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:::::::*
cpe:2.3:a:openssl:openssl:1.0.0a:::::::*
cpe:2.3:a:openssl:openssl:1.0.0q:::::::*
cpe:2.3:a:openssl:openssl:1.0.1i:::::::*
cpe:2.3:a:openssl:openssl:1.0.0b:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.1:::::::*
cpe:2.3:a:openssl:openssl:1.0.0g:::::::*
cpe:2.3:a:openssl:openssl::::::::		0.9.8ze