File tree Expand file tree Collapse file tree 1 file changed +12
-9
lines changed
modules/auxiliary/dos/ssl Expand file tree Collapse file tree 1 file changed +12
-9
lines changed Original file line number Diff line number Diff line change @@ -9,15 +9,18 @@ def initialize(info = {})
9
9
super ( update_info ( info ,
10
10
'Name' => 'OpenSSL TLS 1.1 and 1.2 AES-NI DoS' ,
11
11
'Description' => %q{
12
- The AES-NI implementation of OpenSSL 1.0.1c does not
13
- properly compute the length of an encrypte message when used
14
- with a TLS version 1.1 or above. This leads to an integer
15
- underflow which can cause a DoS.
12
+ The AES-NI implementation of OpenSSL 1.0.1c does not properly compute the
13
+ length of an encrypted message when used with a TLS version 1.1 or above. This
14
+ leads to an integer underflow which can cause a DoS. The vulnerable function
15
+ aesni_cbc_hmac_sha1_cipher is only included in the 64 bits versions of OpenSSL.
16
+ This module has been tested successfully on Ubuntu 12.04 (64 bits) with the default
17
+ OpenSSL 1.0.1c package.
16
18
} ,
17
- 'Author' => [
18
- 'Wolfgang Ettlinger <wolfgang.ettlinger[at]gmail.com>'
19
- ] ,
20
- 'License' => BSD_LICENSE ,
19
+ 'Author' =>
20
+ [
21
+ 'Wolfgang Ettlinger <wolfgang.ettlinger[at]gmail.com>'
22
+ ] ,
23
+ 'License' => MSF_LICENSE ,
21
24
'References' =>
22
25
[
23
26
[ 'CVE' , '2012-2686' ] ,
@@ -138,7 +141,7 @@ def run
138
141
connect
139
142
140
143
sock . put ( p1 )
141
- resp = sock . recv ( 4096 )
144
+ resp = sock . get_once
142
145
143
146
cs = get_cipher_suite ( resp )
144
147
You can’t perform that action at this time.
0 commit comments