CVE-2011-1473
OpenSSL < 0.9.8k and 0.9.8m-1.x - Denial of Service via Client-Initiated Renegotiation
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2011-1473. PoCs published by XDLDCG, khaledibnalwalid, zjt674449039.
AI-analyzed exploit summary This repository contains a functional bash script that exploits CVE-2011-1473 by flooding a target server with TLS renegotiation requests using OpenSSL. The script automates the process by creating a FIFO pipe to continuously send renegotiation commands to the OpenSSL client.
Description
OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-5094. NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment
Exploits (3)
This repository contains a functional bash script that exploits CVE-2011-1473 by flooding a target server with TLS renegotiation requests using OpenSSL. The script automates the process by creating a FIFO pipe to continuously send renegotiation commands to the OpenSSL client.
The repository contains a Python script that scans for CVE-2011-1473, a TLS renegotiation vulnerability, by attempting to trigger renegotiation with a target server using OpenSSL. It does not exploit the vulnerability but detects if the target is vulnerable.