Skip to content

Commit 781132b

Browse files
author
jvazquez-r7
committed
cleanup for openssl_aesni
1 parent 784c075 commit 781132b

File tree

1 file changed

+12
-9
lines changed

1 file changed

+12
-9
lines changed

modules/auxiliary/dos/ssl/openssl_aesni.rb

Lines changed: 12 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -9,15 +9,18 @@ def initialize(info = {})
99
super(update_info(info,
1010
'Name' => 'OpenSSL TLS 1.1 and 1.2 AES-NI DoS',
1111
'Description' => %q{
12-
The AES-NI implementation of OpenSSL 1.0.1c does not
13-
properly compute the length of an encrypte message when used
14-
with a TLS version 1.1 or above. This leads to an integer
15-
underflow which can cause a DoS.
12+
The AES-NI implementation of OpenSSL 1.0.1c does not properly compute the
13+
length of an encrypted message when used with a TLS version 1.1 or above. This
14+
leads to an integer underflow which can cause a DoS. The vulnerable function
15+
aesni_cbc_hmac_sha1_cipher is only included in the 64 bits versions of OpenSSL.
16+
This module has been tested successfully on Ubuntu 12.04 (64 bits) with the default
17+
OpenSSL 1.0.1c package.
1618
},
17-
'Author' => [
18-
'Wolfgang Ettlinger <wolfgang.ettlinger[at]gmail.com>'
19-
],
20-
'License' => BSD_LICENSE,
19+
'Author' =>
20+
[
21+
'Wolfgang Ettlinger <wolfgang.ettlinger[at]gmail.com>'
22+
],
23+
'License' => MSF_LICENSE,
2124
'References' =>
2225
[
2326
[ 'CVE', '2012-2686'],
@@ -138,7 +141,7 @@ def run
138141
connect
139142

140143
sock.put(p1)
141-
resp = sock.recv(4096)
144+
resp = sock.get_once
142145

143146
cs = get_cipher_suite(resp)
144147

0 commit comments

Comments
 (0)