-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

IBM SECURITY ADVISORY

First Issued: Mon Jun 29 10:21:51 CDT 2009

The most recent version of this document is available here:

http://aix.software.ibm.com/aix/efixes/security/ssl_advisory.asc
or
ftp://aix.software.ibm.com/aix/efixes/security/ssl_advisory.asc

VULNERABILITY SUMMARY

VULNERABILITY: AIX OpenSSL DTLS remote denial of service

PLATFORMS: AIX 5.2, 5.3, 6.1

SOLUTION: Apply the fix as described below.

THREAT: See below

CERT VU Number: n/a
CVE Numbers: CVE-2009-1377, CVE-2009-1378, CVE-2009-1379

DETAILED INFORMATION

I. DESCRIPTION

Multiple vulnerabilities have been identified in OpenSSL, which
could be exploited by remote attackers to cause a denial of
service. IBM is fixing these security flaws in the AIX openssl
0.9.8.840 for AIX 5.3 and 6.1 and 0.9.8.804 for AIX 5.2 packages
which are based on OpenSSL 0.9.8h

The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k
and earlier 0.9.8 versions allows remote attackers to cause a
denial of service (memory consumption) via a large series of
"future epoch" DTLS records that are buffered in a queue, aka
"DTLS record buffer limitation bug." (CVE-2009-1377)

Multiple memory leaks in the dtls1_process_out_of_seq_message
function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8
versions allow remote attackers to cause a denial of service
(memory consumption) via DTLS records that (1) are duplicates or
(2) have sequence numbers much greater than current sequence
numbers, aka "DTLS fragment handling memory leak." (CVE-2009-1378)

Use-after-free vulnerability in the
dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in
OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of
service (openssl s_client crash) and possibly have unspecified
other impact via a DTLS packet, as demonstrated by a packet from a
server that uses a crafted server certificate. (CVE-2009-1379)

II. PLATFORM VULNERABILITY ASSESSMENT

To determine if your system is vulnerable, execute the following
command:

lslpp -L openssl.base

The following fileset levels are vulnerable:

AIX 6.1: all versions less than 0.9.8.840
AIX 5.3: all versions less than 0.9.8.840
AIX 5.2: all versions less than 0.9.8.804

IMPORTANT: If AIX OpenSSH is in use, it must be updated to version
5.0 when updating to OpenSSL 0.9.8.840 or 0.9.8.804

AIX OpenSSH can be downloaded from:

http://sourceforge.net/projects/openssh-aix

III. FIXES

A fix is available, and it can be downloaded from:

https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp

To extract the fixes from the tar file:

zcat openssl.0.9.8.840-AIX5.3_6.1.tar.Z | tar xvf -
or
zcat openssl.0.9.8.804-AIX-5.2.tar.Z | tar xvf -

IMPORTANT: If possible, it is recommended that a mksysb backup
of the system be created. Verify it is both bootable and
readable before proceeding.

To preview the fix installation:

installp -apYd . openssl

To install the fix package:

installp -aXYd . openssl

IV. WORKAROUNDS

There are no workarounds.

V. CONTACT INFORMATION

If you would like to receive AIX Security Advisories via email,
please visit:

http://www.ibm.com/systems/support

and click on the "My notifications" link.

To view previously issued advisories, please visit:

http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd

Comments regarding the content of this announcement can be
directed to:

security-alert@austin.ibm.com

To obtain the PGP public key that can be used to communicate
securely with the AIX Security Team you can either:

A. Download the key from our web page:

http://www.ibm.com/systems/resources/systems_p_os_aix_security_pgpkey.txt

B. Download the key from a PGP Public Key Server. The key ID is:

0xADA6EB4D

Please contact your local IBM AIX support center for any
assistance.

eServer is a trademark of International Business Machines
Corporation. IBM, AIX and pSeries are registered trademarks of
International Business Machines Corporation. All other trademarks
are property of their respective holders.

VI. ACKNOWLEDGEMENTS

These vulnerabilites were reported by Daniel Mentz and Stephen
Henson.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (AIX)

iD8DBQFKSODmP9Qud62m600RAnsZAJ4wy9TafvP/bs70U0MBLt6czHDLzQCfQGRR
y5N1MyAZpH7mg8YXCzA6Aws=
=FkF6
-----END PGP SIGNATURE-----