CVE-2007-3108

{"id": "CVE-2007-3108", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 1.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:H/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 1.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-08-08T01:17:00.000", "references": [{"url": "http://cvs.openssl.org/chngview?cn=16275", "source": "secalert@redhat.com"}, {"url": "http://lists.vmware.com/pipermail/security-announce/2008/000002.html", "source": "secalert@redhat.com"}, {"url": "http://openssl.org/news/patch-CVE-2007-3108.txt", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/26411", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/26893", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/27021", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/27078", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/27097", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/27205", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/27330", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/27770", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/27870", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/28368", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/30161", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/30220", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/31467", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/31489", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/31531", "source": "secalert@redhat.com"}, {"url": "http://security.gentoo.org/glsa/glsa-200710-06.xml", "source": "secalert@redhat.com"}, {"url": "http://support.attachmate.com/techdocs/2374.html", "source": "secalert@redhat.com"}, {"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-485.htm", "source": "secalert@redhat.com"}, {"url": "http://www.bluecoat.com/support/securityadvisories/advisory_openssl_rsa_key_reconstruction_vulnerability", "source": "secalert@redhat.com"}, {"url": "http://www.debian.org/security/2008/dsa-1571", "source": "secalert@redhat.com"}, {"url": "http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml", "source": "secalert@redhat.com"}, {"url": "http://www.kb.cert.org/vuls/id/724968", "tags": ["US Government Resource"], "source": "secalert@redhat.com"}, {"url": "http://www.kb.cert.org/vuls/id/RGII-74KLP3", "source": "secalert@redhat.com"}, {"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:193", "source": "secalert@redhat.com"}, {"url": "http://www.redhat.com/support/errata/RHSA-2007-0813.html", "source": "secalert@redhat.com"}, {"url": "http://www.redhat.com/support/errata/RHSA-2007-0964.html", "source": "secalert@redhat.com"}, {"url": "http://www.redhat.com/support/errata/RHSA-2007-1003.html", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/archive/1/476341/100/0/threaded", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/archive/1/485936/100/0/threaded", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/archive/1/486859/100/0/threaded", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/25163", "tags": ["Patch"], "source": "secalert@redhat.com"}, {"url": "http://www.vmware.com/security/advisories/VMSA-2008-0001.html", "source": "secalert@redhat.com"}, {"url": "http://www.vmware.com/security/advisories/VMSA-2008-0013.html", "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2007/2759", "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2007/4010", "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2008/0064", "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2008/2361", "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2008/2362", "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2008/2396", "source": "secalert@redhat.com"}, {"url": "https://issues.rpath.com/browse/RPL-1613", "source": "secalert@redhat.com"}, {"url": "https://issues.rpath.com/browse/RPL-1633", "source": "secalert@redhat.com"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9984", "source": "secalert@redhat.com"}, {"url": "https://usn.ubuntu.com/522-1/", "source": "secalert@redhat.com"}, {"url": "http://cvs.openssl.org/chngview?cn=16275", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.vmware.com/pipermail/security-announce/2008/000002.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://openssl.org/news/patch-CVE-2007-3108.txt", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/26411", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/26893", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/27021", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/27078", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/27097", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/27205", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/27330", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/27770", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/27870", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/28368", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/30161", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/30220", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/31467", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/31489", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/31531", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://security.gentoo.org/glsa/glsa-200710-06.xml", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://support.attachmate.com/techdocs/2374.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-485.htm", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.bluecoat.com/support/securityadvisories/advisory_openssl_rsa_key_reconstruction_vulnerability", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.debian.org/security/2008/dsa-1571", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.kb.cert.org/vuls/id/724968", "tags": ["US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.kb.cert.org/vuls/id/RGII-74KLP3", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:193", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.redhat.com/support/errata/RHSA-2007-0813.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.redhat.com/support/errata/RHSA-2007-0964.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.redhat.com/support/errata/RHSA-2007-1003.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/476341/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/485936/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/486859/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/25163", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vmware.com/security/advisories/VMSA-2008-0001.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vmware.com/security/advisories/VMSA-2008-0013.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/2759", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/4010", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2008/0064", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2008/2361", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2008/2362", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2008/2396", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://issues.rpath.com/browse/RPL-1613", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://issues.rpath.com/browse/RPL-1633", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9984", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://usn.ubuntu.com/522-1/", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys."}, {"lang": "es", "value": "La funci\u00f3n BN_from_montgomery en el crypto/bn/bn_mont.c del OpenSSL 0.9.8e y anteriores, no interpreta adecuadamente la multiplicaci\u00f3n Montgomery, lo que permite a usuarios locales llevar a cabo ataques por canal colateral (side-channel) y recuperar claves privadas RSA."}], "lastModified": "2024-11-21T00:32:25.513", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "636B0CAF-5A47-4CC7-9DAF-52090894B647", "versionEndIncluding": "0.9.8e"}], "operator": "OR"}]}], "vendorComments": [{"comment": "This paper describes a possible side-channel attack that hasn\u2019t been proven outside of a lab environment. In reality many factors would make this harder to exploit. If exploited, a local user could obtain RSA private keys (for example for web sites being run on the server). We have rated this as affecting Red Hat products with moderate security severity. Although the OpenSSL team have produced a patch for this issue, it is non-trivial and will require more testing before we can deploy it in a future update. Our current plan is as follows:\n\n- To include a backported fix in an OpenSSL update as part of Enterprise Linux 4.6. This will get testing via beta and give time for more extensive internal and upstream testing\n- To release an update for OpenSSL for other platforms at the same time as 4.6 is released\n http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-3108\n", "lastModified": "2007-08-14T00:00:00", "organization": "Red Hat"}], "sourceIdentifier": "secalert@redhat.com"}