安全研究
安全漏洞
GnuTLS X.509证书链验证漏洞
发布日期：2008-11-10
更新日期：2008-11-11
受影响系统：
GNU GnuTLS < 2.6.1不受影响系统：
GNU GnuTLS 2.6.1描述：
BUGTRAQ ID: 32232
CVE(CAN) ID: CVE-2008-4989
GnuTLS是用于实现TLS加密协议的函数库。
GNU TLS库的X.509证书链验证中存在错误，允许中间人用户使用任意名称并诱骗GNU TLS客户端信任该名称。
漏洞具体存在于x509/verify.c文件的_gnutls_x509_verify_certificate函数中：
1. 用可信任证书列表验证证书列表的最后一个单元。
2. 如果是自签名的话，从列表中删除最后一个单元。
3. 检查证书链确保每个证书都由后一个签名，除了最后一个单元。
如果向列表中添加任意的自签名可信任证书，就不会检查可信任证书列表便信任倒数第二个单元。
<*来源：Martin von Gagern （Martin.vGagern@gmx.net）
链接：http://secunia.com/advisories/32619/
http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3217
http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3215
http://www.debian.org/security/2009/dsa-1719
*>
建议：
厂商补丁：
Debian
------
Debian已经为此发布了一个安全公告（DSA-1719-2）以及相应补丁:
DSA-1719-2：New GNUTLS packages fix regression
链接：http://www.debian.org/security/2009/dsa-1719
补丁下载：
Source archives:
http://security.debian.org/pool/updates/main/g/gnutls13/gnutls13_1.4.4.orig.tar.gz
Size/MD5 checksum: 4752009 c06ada020e2b69caa51833175d59f8b2
http://security.debian.org/pool/updates/main/g/gnutls13/gnutls13_1.4.4-3+etch4.diff.gz
Size/MD5 checksum: 21337 fd8b423c5f4a11af2c60eda979df9b00
http://security.debian.org/pool/updates/main/g/gnutls13/gnutls13_1.4.4-3+etch4.dsc
Size/MD5 checksum: 1259 229287edc239349b5014f2d31890912a
Architecture independent packages:
http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-doc_1.4.4-3+etch4_all.deb
Size/MD5 checksum: 2305134 4809b5a15fa8554dbf0cc7331ed0128a
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls-dev_1.4.4-3+etch4_amd64.deb
Size/MD5 checksum: 389308 c6aa74857be44068f4e0d1f1322e30af
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13_1.4.4-3+etch4_amd64.deb
Size/MD5 checksum: 314864 9ea77f3b9e6fb21d899786f0f14d714c
http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-bin_1.4.4-3+etch4_amd64.deb
Size/MD5 checksum: 183034 8e1dae14f9ea57b112fe260b1b0d4133
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13-dbg_1.4.4-3+etch4_amd64.deb
Size/MD5 checksum: 539598 223f5f50236b96400405a7c2ea4af3b9
arm architecture (ARM)
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls-dev_1.4.4-3+etch4_arm.deb
Size/MD5 checksum: 353164 9f47a15eb353836c9f02bc7621c8ee2f
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13_1.4.4-3+etch4_arm.deb
Size/MD5 checksum: 281742 977162dcbafd9a88bb5715d1295c7cab
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13-dbg_1.4.4-3+etch4_arm.deb
Size/MD5 checksum: 509214 d64fac5c2a6aeaaf47ae8aa0f99aa841
http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-bin_1.4.4-3+etch4_arm.deb
Size/MD5 checksum: 169820 ace0fc294e2f61d61a163ebf6ea98af9
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13-dbg_1.4.4-3+etch4_i386.deb
Size/MD5 checksum: 525750 944d1f780c8ea773d8d01d1839d0f8cd
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13_1.4.4-3+etch4_i386.deb
Size/MD5 checksum: 281910 5b2168a10c343bb48d7ff6b063f90b26
http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-bin_1.4.4-3+etch4_i386.deb
Size/MD5 checksum: 173350 5cd3104555a852ed354265c3d4921924
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls-dev_1.4.4-3+etch4_i386.deb
Size/MD5 checksum: 359610 8ca01d76b60baa1164782aacfa7f12da
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-bin_1.4.4-3+etch4_ia64.deb
Size/MD5 checksum: 229280 3de3e4fad552e820d9b62b4a161b6807
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls-dev_1.4.4-3+etch4_ia64.deb
Size/MD5 checksum: 550354 c66467b0a8ea04ff8695f0f51dc23fa0
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13_1.4.4-3+etch4_ia64.deb
Size/MD5 checksum: 394816 c7e52cfc951d1395eafc88d600be8082
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13-dbg_1.4.4-3+etch4_ia64.deb
Size/MD5 checksum: 528264 0c5a00e683ed44c8e70bd7788fa544f3
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls-dev_1.4.4-3+etch4_mips.deb
Size/MD5 checksum: 418556 517105132650631d491e16951f50f4ea
http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-bin_1.4.4-3+etch4_mips.deb
Size/MD5 checksum: 182930 1dd9d1855f0a76002afa0283859be901
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13_1.4.4-3+etch4_mips.deb
Size/MD5 checksum: 279350 ad784dd6ef0a0225c3cb05a123899109
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13-dbg_1.4.4-3+etch4_mips.deb
Size/MD5 checksum: 553722 8775869e9a8c161ac775484fb4266412
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13_1.4.4-3+etch4_mipsel.deb
Size/MD5 checksum: 277854 c918ae14c6f090db47d8524bb960da86
http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-bin_1.4.4-3+etch4_mipsel.deb
Size/MD5 checksum: 182814 2fac3eef97e8d358133428efc41be2a8
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls-dev_1.4.4-3+etch4_mipsel.deb
Size/MD5 checksum: 417234 9bf2baa3edb0f726eb712182c76255d8
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13-dbg_1.4.4-3+etch4_mipsel.deb
Size/MD5 checksum: 542104 c332743916f758cd9ab65ac0d6acf835
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-bin_1.4.4-3+etch4_powerpc.deb
Size/MD5 checksum: 184706 6ab0e02d76e0e399379601cd8017ee5a
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13-dbg_1.4.4-3+etch4_powerpc.deb
Size/MD5 checksum: 538836 d6c1e636a1cfebfa39013abc8f7de22a
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13_1.4.4-3+etch4_powerpc.deb
Size/MD5 checksum: 289006 3a5f173773e21f77e5c361c7c83cad95
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls-dev_1.4.4-3+etch4_powerpc.deb
Size/MD5 checksum: 388930 e784341c5933f4bd1e6e6ebd07f6fee4
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-bin_1.4.4-3+etch4_s390.deb
Size/MD5 checksum: 184614 c7587959cdf1216f4bdea48a9a637152
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13_1.4.4-3+etch4_s390.deb
Size/MD5 checksum: 311684 f5716c1530abed02d290464f7cada72c
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13-dbg_1.4.4-3+etch4_s390.deb
Size/MD5 checksum: 537542 4fadf059fb5875cc990de83a79a1b7a3
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls-dev_1.4.4-3+etch4_s390.deb
Size/MD5 checksum: 380358 8bc9700e54e895947bc4ee2b399dfee3
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13-dbg_1.4.4-3+etch4_sparc.deb
Size/MD5 checksum: 491496 e24ea4ca4cbc14f35791523c4f955932
http://security.debian.org/pool/updates/main/g/gnutls13/gnutls-bin_1.4.4-3+etch4_sparc.deb
Size/MD5 checksum: 169438 c872e4a810ab75450b90c79e3ea7fe3f
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls13_1.4.4-3+etch4_sparc.deb
Size/MD5 checksum: 271296 7fe33d25598be79b4bd58d5ea5e0258f
http://security.debian.org/pool/updates/main/g/gnutls13/libgnutls-dev_1.4.4-3+etch4_sparc.deb
Size/MD5 checksum: 380138 10c4452d13237bda8e15c5ee5be878c6
Debian GNU/Linux 5.0 alias lenny
- --------------------------------
Source archives:
http://security.debian.org/pool/updates/main/g/gnutls26/gnutls26_2.4.2-6+lenny1.diff.gz
Size/MD5 checksum: 20298 e6bb02c6522cf6b6842e0b38c633a087
http://security.debian.org/pool/updates/main/g/gnutls26/gnutls26_2.4.2-6+lenny1.dsc
Size/MD5 checksum: 1904 3410a16fe6f7dcce25f1c55946357dc6
http://security.debian.org/pool/updates/main/g/gnutls26/gnutls26_2.4.2.orig.tar.gz
Size/MD5 checksum: 5984345 8fea7c57f4badcafcd31eb0f981f169a
Architecture independent packages:
http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-doc_2.4.2-6+lenny1_all.deb
Size/MD5 checksum: 2751582 9c920495e79d03f377d96ed94915a378
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_2.4.2-6+lenny1_alpha.deb
Size/MD5 checksum: 746956 6ba68bc991abcd886314ca52fb301f0d
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2.4.2-6+lenny1_alpha.deb
Size/MD5 checksum: 516830 6db84226b03e84bdd6e143b9c372f6ff
http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4.2-6+lenny1_alpha.deb
Size/MD5 checksum: 301862 13e22f528ab7a5f196111d187889e8d7
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-dbg_2.4.2-6+lenny1_alpha.deb
Size/MD5 checksum: 1141862 fc33865426c76c54994c076aa4dc55ec
http://security.debian.org/pool/updates/main/g/gnutls26/guile-gnutls_2.4.2-6+lenny1_alpha.deb
Size/MD5 checksum: 217774 aa5c315542532f504fa0f40e6756d3ee
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4.2-6+lenny1_amd64.deb
Size/MD5 checksum: 285624 48f7e580aed0f99e92eeee384c97cc21
http://security.debian.org/pool/updates/main/g/gnutls26/guile-gnutls_2.4.2-6+lenny1_amd64.deb
Size/MD5 checksum: 215802 2ed45e368aabeb938f90fee4b3cf4668
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-dbg_2.4.2-6+lenny1_amd64.deb
Size/MD5 checksum: 1136770 db82f80deb858958e98ff3fd1422dd2c
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_2.4.2-6+lenny1_amd64.deb
Size/MD5 checksum: 586148 c95ef6b6b2af28fc7a8bfebe60703092
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2.4.2-6+lenny1_amd64.deb
Size/MD5 checksum: 505908 e560d1c33d60f9b8c9748d6f70a2ccbc
arm architecture (ARM)
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_2.4.2-6+lenny1_arm.deb
Size/MD5 checksum: 527790 87252e8649cdf5f317a3ac193c68c70d
http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4.2-6+lenny1_arm.deb
Size/MD5 checksum: 269682 250998601126d1a5ae82be7db086a0f7
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-dbg_2.4.2-6+lenny1_arm.deb
Size/MD5 checksum: 1070766 59d90bba4d2287794ed753021ecbbf02
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2.4.2-6+lenny1_arm.deb
Size/MD5 checksum: 445782 e31938233bab678b943a3f4c2dd1ea56
http://security.debian.org/pool/updates/main/g/gnutls26/guile-gnutls_2.4.2-6+lenny1_arm.deb
Size/MD5 checksum: 206486 4b388bbcc3c79008786c8aac9c387376
armel architecture (ARM EABI)
http://security.debian.org/pool/updates/main/g/gnutls26/guile-gnutls_2.4.2-6+lenny1_armel.deb
Size/MD5 checksum: 206812 1f067f477dd0408255ee75810107c8c0
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2.4.2-6+lenny1_armel.deb
Size/MD5 checksum: 452356 908efc56e9b571d0f2ba965566924064
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-dbg_2.4.2-6+lenny1_armel.deb
Size/MD5 checksum: 1076694 25ddb450f16240a9ef522b9cf8e0b176
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_2.4.2-6+lenny1_armel.deb
Size/MD5 checksum: 530178 e314774bf8163d3ab38693798eba8718
http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4.2-6+lenny1_armel.deb
Size/MD5 checksum: 271192 6fe14120a5ecf84cce73420a58306f3f
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-dbg_2.4.2-6+lenny1_i386.deb
Size/MD5 checksum: 1093972 e84fc62e663d53231d7238b97a75cb2e
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_2.4.2-6+lenny1_i386.deb
Size/MD5 checksum: 538250 f68cc41f9e9b90901a5e8e73ae83de68
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2.4.2-6+lenny1_i386.deb
Size/MD5 checksum: 457306 2b4ce30e59d0d9f0924ca5952cd03035
http://security.debian.org/pool/updates/main/g/gnutls26/guile-gnutls_2.4.2-6+lenny1_i386.deb
Size/MD5 checksum: 211152 87efd0f0aec95b071881f3e3540c3afa
http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4.2-6+lenny1_i386.deb
Size/MD5 checksum: 270274 61bad9c03e790afb18e4a938cbe2446f
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_2.4.2-6+lenny1_ia64.deb
Size/MD5 checksum: 782620 95712b24bb1114caa021729297664601
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-dbg_2.4.2-6+lenny1_ia64.deb
Size/MD5 checksum: 933118 ba4cf6d4ccbb1701f30f3a875a77615a
http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4.2-6+lenny1_ia64.deb
Size/MD5 checksum: 341822 553a30423b78eb84b76168e825b13bea
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2.4.2-6+lenny1_ia64.deb
Size/MD5 checksum: 607420 29f719a5c0fee969d968753bdd17d92d
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2.4.2-6+lenny1_mips.deb
Size/MD5 checksum: 450090 9e8b0b237b372fb9564367513b5f6ffb
http://security.debian.org/pool/updates/main/g/gnutls26/guile-gnutls_2.4.2-6+lenny1_mips.deb
Size/MD5 checksum: 204034 9bb1b622aa462a4db4e2f1472a507bd0
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_2.4.2-6+lenny1_mips.deb
Size/MD5 checksum: 611794 1d9e8fec47f7a68b64d57c4d67a8dfa9
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-dbg_2.4.2-6+lenny1_mips.deb
Size/MD5 checksum: 1155814 6dd48f5c93110588df75719fe1da4d99
http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4.2-6+lenny1_mips.deb
Size/MD5 checksum: 277060 ed80ff11b8463272c89d70efa295b8bb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4.2-6+lenny1_mipsel.deb
Size/MD5 checksum: 276744 b6b3ccdfa730e35c4feda7a0787ece43
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-dbg_2.4.2-6+lenny1_mipsel.deb
Size/MD5 checksum: 1134448 4a3265f360fafa7454e5377091efff7d
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_2.4.2-6+lenny1_mipsel.deb
Size/MD5 checksum: 608204 255d5a1d3e84c596ba4f5cf9debfb8a6
http://security.debian.org/pool/updates/main/g/gnutls26/guile-gnutls_2.4.2-6+lenny1_mipsel.deb
Size/MD5 checksum: 203572 c06441ed377c6e1c4baf8c73bdfc4baf
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2.4.2-6+lenny1_mipsel.deb
Size/MD5 checksum: 447520 dd41ed0007cb4e3385746f0e289532a4
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2.4.2-6+lenny1_powerpc.deb
Size/MD5 checksum: 487814 01f1da9942a0e77ac35d39566a22771a
http://security.debian.org/pool/updates/main/g/gnutls26/guile-gnutls_2.4.2-6+lenny1_powerpc.deb
Size/MD5 checksum: 218270 62e9e476659217bb4028bd9a87b19047
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-dbg_2.4.2-6+lenny1_powerpc.deb
Size/MD5 checksum: 1134278 4f8242f3dae43f6f9211857739775b01
http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4.2-6+lenny1_powerpc.deb
Size/MD5 checksum: 305018 b91fd4b4f92b83f70c9e7d6c578d3353
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_2.4.2-6+lenny1_powerpc.deb
Size/MD5 checksum: 578388 ccb884fa2239186f1e71f6dc07c409fc
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_2.4.2-6+lenny1_s390.deb
Size/MD5 checksum: 566204 e62bf4f8d31b18a1b8c8342e19bc3ad2
http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4.2-6+lenny1_s390.deb
Size/MD5 checksum: 289806 e51ed7c4ff9f68882f4a15fcdca96071
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-dbg_2.4.2-6+lenny1_s390.deb
Size/MD5 checksum: 1130046 a1ac3b9c196f7e75bc289a3b22f493d2
http://security.debian.org/pool/updates/main/g/gnutls26/guile-gnutls_2.4.2-6+lenny1_s390.deb
Size/MD5 checksum: 216206 1ce8f67ca2b9f739394f10724f420923
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2.4.2-6+lenny1_s390.deb
Size/MD5 checksum: 495762 5455f27aaaeba4f915c926a30cab67b7
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/g/gnutls26/gnutls-bin_2.4.2-6+lenny1_sparc.deb
Size/MD5 checksum: 275976 36ce4af3d5cc465dbde5f5a2aae79412
http://security.debian.org/pool/updates/main/g/gnutls26/guile-gnutls_2.4.2-6+lenny1_sparc.deb
Size/MD5 checksum: 209024 fa624b91e2aaace19fd3e8811c58db93
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls-dev_2.4.2-6+lenny1_sparc.deb
Size/MD5 checksum: 555742 73d68d4ca103be6606211447453d7c1f
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26_2.4.2-6+lenny1_sparc.deb
Size/MD5 checksum: 437112 afcefdffc5735c5e3c7560e18b0cf993
http://security.debian.org/pool/updates/main/g/gnutls26/libgnutls26-dbg_2.4.2-6+lenny1_sparc.deb
Size/MD5 checksum: 1021176 0736c346230146549d5871a4572bec13
补丁安装方法：
1. 手工安装补丁包：
首先，使用下面的命令来下载补丁软件：
# wget url (url是补丁下载链接地址)
然后，使用下面的命令来安装补丁：
# dpkg -i file.deb (file是相应的补丁名)
2. 使用apt-get自动安装补丁包：
首先，使用下面的命令更新内部数据库：
# apt-get update
然后，使用下面的命令安装更新软件包：
# apt-get upgrade
GNU
---
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
http://ftp.gnu.org/pub/gnu/gnutls/gnutls-2.6.1.tar.bz2
浏览次数：5723
严重程度：0（网友投票）
绿盟科技给您安全的保障