Note: This is an archival copy of Security Sun Alert 247186 as previously published on http://sunsolve.sun.com.|
Latest version of this security advisory is available from http://support.oracle.com as Sun Alert 1019833.1.
Solaris 9 Operating System
Solaris 10 Operating System
Date of Workaround Release
Date of Resolved Release
A Security Vulnerability in Solaris Secure Shell (SSH) May Expose Some Plain Text From Encrypted Traffic
A security vulnerability in the Solaris Secure Shell (SSH) software (see ssh(1)), when used with CBC-mode ciphers and (SSH protocol version 2), may allow a remote unprivileged user who is able to intercept SSH network traffic to gain access to a portion of plain text information from intercepted traffic which would otherwise be encrypted.
This issue is also referenced in the following documents:
CERT Vulnerability VU#958563 at http://www.kb.cert.org/vuls/id/958563
2. Contributing Factors
This issue can occur in the following releases:
1. Solaris 8 does not include the SSH software and is not impacted by this issue.
2. This issue only impacts SSH connections which are using a CBC mode cipher to encrypt the traffic. Both the client and the server in an SSH connection can maintain separate lists of supported ciphers and a cipher will be chosen from the overlap within those two lists.
To determine the ciphers that a Sun SSH server is configured to use, search for the 'Ciphers' setting in the sshd_config(4) file, as in the following example:
$ grep Ciphers /etc/ssh/sshd_configIf there is no output, or the only lines which appear are commented (begin with a '#') then the default cipher list will be used, which is documented in the sshd_config(4) man page.
There are no symptoms which would indicate this issue has been exploited to gain unauthorized access to plain text information from encrypted SSH traffic.
This issue only occurs when CBC mode ciphers are in use. Therefore, it is possible to work around this issue by disabling the use of those ciphers.
For example, editing the sshd_config(4) file for a Sun SSH server to remove all references to CBC ciphers within the 'Ciphers' setting of that file will prevent connections to that server from using the CBC ciphers. The SSH server should be restarted after making this change, as in the following example for Solaris 10:
# svcadm restart sshor for Solaris 9:
# /etc/init.d/sshd stop ; /etc/init.d/sshd start
This issue is addressed in the following releases:
Copyright 2000-2009 Sun Microsystems, Inc., 4150 Network Circle, Santa Clara, CA 95054 U.S.A. All rights reserved.
09-Feb-2009: Updated Workaround section for IDRs
25-Feb-2009: Updated Contributing Factors and Resolution sections
02-Apr-2009: Updated Contributing Factors and Resolution sections, issue Resolved
This solution has no attachment