Man-in-the-middle attack in Hewlett Packard Enterprise Development LP products - CVE-2015-4000

Vulnerability identifier: #VU86

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2015-4000

CWE-ID: CWE-300

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to decrypt TLS connections in certain situations.

The vulnerability exists due to boundary error when parsing HTTP requests. A remote unauthenticated attacker can conduct a man-in-the-middle attack that can lead to the target system to downgrade the Diffie-Hellman algorithm to 512-bit export-grade cryptography.

Successful exploitation of this vulnerability may result in modification of authentication information

SPARC Enterprise M3000
SPARC Enterprise M9000
SPARC Enterprise M8000
SPARC Enterprise M5000
SPARC Enterprise M4000
HPE Integrated Lights-Out 4 (iLO 4)
Oracle GlassFish Server
Oracle Directory Server Enterprise Edition
Oracle OpenSSO
HP Project and Portfolio Management Center
Sun ONE/iPlanet Web Server
Oracle Secure Global Desktop
HPE Service Manager
Oracle Solaris
Gentoo Linux
Amazon Linux AMI
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
SUSE Enterprise Storage
Red Hat Enterprise Linux EUS Compute Node
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux
SUSE Linux Enterprise Server 12 SP2 BCL
SUSE Linux Enterprise Server 12 SP4 LTSS
SUSE Linux Enterprise Server 12 SP4 ESPOS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Legacy Module
openSUSE Leap
Fedora
Opensuse
Oracle Traffic Director
CODAR
Cloud Service Automation (CSA)
UCMDB Browser
HP Business Service Automation Essentials
Integration Adaptor
HP Release Control
Service Health Reporter
BSM Connector
Discovery and Dependency Mapping Inventory (DDMI)
Connect-IT
UCMDB
UCMDB Configuration Manager
Universal Discovery
Operations Agent Virtual Appliance
Integrated Management Module II (IMM2)
Hyper-Scale Manager
IBM Integrated Management Module
HP-UX Web Server Suite
Integrated Lights-Out 2
3PAR OS
IBM Aspera Console
PowerFlex Manager
XIV Management Tools
Flex System FC43171 8Gb SAN Switch and SAN Pass-thru
TS2900 Tape Autoloader
HP Performance Manager
HP Operations Manager
HP Operations Manager for Unix
HP Operations Manager for Linux
HP AssetManager
Oracle Enterprise Manager Ops Center
dev-libs/openssl
java-1_8_0-openjdk-debuginfo
java-1_8_0-openjdk-demo
java-1_8_0-openjdk-debugsource
java-1_8_0-openjdk-headless-debuginfo
java-1_8_0-openjdk-headless
java-1_8_0-openjdk-devel
java-1_8_0-openjdk
java-1_8_0-openjdk-demo-debuginfo
java-1_8_0-openjdk-devel-debuginfo
java-1_8_0-openjdk-src
java-1_8_0-openjdk-accessibility
java-1_8_0-openjdk-javadoc
nrpe
nrpe-debugsource
monitoring-plugins-nrpe
nrpe-debuginfo
monitoring-plugins-nrpe-debuginfo
nss-util
nss-softokn
nss
HPE Integrated Lights-Out 3
QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module for BladeCenter
QLogic Virtual Fabric Extension Module for IBM BladeCenter

Install upgrated versions at:

http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05193083

HP Release Control - update to 9.21 P3
Integrated Management Module II (IMM2) - update to 1AOO68L — 5.20
dev-libs/openssl - update to 1.0.1o
Hyper-Scale Manager - update to 1.7.0.1
java-1_8_0-openjdk-debuginfo - addressed in versions 1.8.0.392-27.93.1, 1.8.0.392-150000.3.85.1
java-1_8_0-openjdk-demo - addressed in versions 1.8.0.392-27.93.1, 1.8.0.392-150000.3.85.1
java-1_8_0-openjdk-debugsource - addressed in versions 1.8.0.392-27.93.1, 1.8.0.392-150000.3.85.1
java-1_8_0-openjdk-headless-debuginfo - addressed in versions 1.8.0.392-27.93.1, 1.8.0.392-150000.3.85.1
java-1_8_0-openjdk-headless - addressed in versions 1.8.0.392-27.93.1, 1.8.0.392-150000.3.85.1
java-1_8_0-openjdk-devel - addressed in versions 1.8.0.392-27.93.1, 1.8.0.392-150000.3.85.1
java-1_8_0-openjdk - addressed in versions 1.8.0.392-27.93.1, 1.8.0.392-150000.3.85.1
java-1_8_0-openjdk-demo-debuginfo - addressed in versions 1.8.0.392-27.93.1, 1.8.0.392-150000.3.85.1
java-1_8_0-openjdk-devel-debuginfo - addressed in versions 1.8.0.392-27.93.1, 1.8.0.392-150000.3.85.1
java-1_8_0-openjdk-src - update to 1.8.0.392-150000.3.85.1
java-1_8_0-openjdk-accessibility - update to 1.8.0.392-150000.3.85.1
java-1_8_0-openjdk-javadoc - update to 1.8.0.392-150000.3.85.1
IBM Integrated Management Module - update to 1.49 YUOOG9A
HPE Integrated Lights-Out 3 - update to 1.87
HP-UX Web Server Suite - update to 2.2.29.02
nrpe - update to 2.15-6.3.1
nrpe-debugsource - update to 2.15-6.3.1
monitoring-plugins-nrpe - update to 2.15-6.3.1
nrpe-debuginfo - update to 2.15-6.3.1
monitoring-plugins-nrpe-debuginfo - update to 2.15-6.3.1
Integrated Lights-Out 2 - update to 2.29
HPE Integrated Lights-Out 4 (iLO 4) - update to 2.30
3PAR OS - addressed in versions 3.2.1 MU5, 3.2.2 MU2
IBM Aspera Console - update to 3.4.5
PowerFlex Manager - update to 3.5.0-5507
nss-util - addressed in versions 3.19.1-1.0.fc21, 3.19.1-1.0.fc22
nss-softokn - addressed in versions 3.19.1-1.0.fc21, 3.19.1-1.0.fc22
nss - addressed in versions 3.19.1-1.0.fc21, 3.19.1-1.0.fc22
XIV Management Tools - update to 4.6.0.1
QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module for BladeCenter - update to 7.10.1.35.00
QLogic Virtual Fabric Extension Module for IBM BladeCenter - update to 9.1.5.04.00
Flex System FC43171 8Gb SAN Switch and SAN Pass-thru - update to 9.1.5.04.00
TS2900 Tape Autoloader - update to 0039

• Exploit #8587 - SSL/TLS Version Detection (November 8, 2022)

• http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05193083
• http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
• http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
• http://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html

• SUSE Linux update for MySQL
• SUSE Linux update for MySQL
• Amazon Linux AMI update for nss, nss-util
• Red Hat update for openssl
• OpenSUSE Linux update for openldap2
• SUSE Linux update for openldap2
• Multiple vulnerabilities in Oracle Enterprise Manager Ops Center
• Multiple vulnerabilities in Dell PowerFlex Manager
• SUSE update for nrpe
• Man-in-the-middle attack in HP Release Control
• Man-in-the-middle attack in Cloud Service Automation and Codar
• Man-in-the-middle attack in HP Project and Portfolio Management Center
• Multiple vulnerabilities in HP Operations Manager for Windows
• Man-in-the-middle attack in HP Operations Agent Virtual Appliance
• Multiple vulnerabilities in HP Performance Manager
• Multiple vulnerabilities in HP Integration Adaptor
• Man-in-the-middle attack in HP Service Health Reporter
• Multiple vulnerabilities in HP BSM Connector (BSMC)
• Man-in-the-middle attack in HP Asset Manager
• Man-in-the-middle attack in HP Service Manager
• Man-in-the-middle attack in HP Connect-IT
• Man-in-the-middle attack in HP Discovery and Dependency Mapping Inventory (DDMI)
• Man-in-the-middle attack in HP UCMDB, HP UCMDB Configuration Manager, HP UCMDB Browser, and HP Universal Discovery
• Man-in-the-middle attack in HP Integrated Lights-Out 2/3/4
• Multiple vulnerabilities in HP Operations Manager for UNIX and Linux
• Man-in-the-middle attack in HP Business Service Automation Essentials (BSAE)
• Man-in-the-middle attack in HPE 3PAR OS
• Multiple vulnerabilities in HP-UX Web Server Suite
• Man-in-the-middle attack in IBM TS2900
• Multiple vulnerabilities in IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru firmware, QLogic 8Gb Intelligent Pass-thru Module and SAN Switch Module and QLogic Virtual Fabric Extension Module
• Multiple vulnerabilities in IBM Integrated Management Module (IMM)
• Multiple vulnerabilities in IBM Integrated Management Module II (IMM2)
• SUSE update for java-1_8_0-openjdk
• SUSE update for java-1_8_0-openjdk
• Man-in-the-middle attack in IBM XIV Management Tools
• Multiple vulnerabilities in IBM Aspera Console
• Gentoo update for OpenSSL
• Fedora 22 update for nss, nss-softokn, nss-util
• Fedora 21 update for nss, nss-softokn, nss-util