The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an "invalid curve attack."

The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.9.x prior to 11.1.1.9.200414 or 12.2.1.3.x prior to 12.2.1.3.200414 or 12.2.1.4.x prior to 12.2.1.4.200414. It is, therefore, affected by multiple vulnerabilities as noted in the April 2020 Critical Patch Update advisory

  - An unspecified vulnerability in the Analystics Web     General component of Oracle BI Published. An easily     exploitable vulnerability could allow an     unauthenticated attacker with network access via HTTP     to compromise Oracle Business Intelligence Enterprise     Edition. A successful attacks of this vulnerability     can result in takeover of Oracle Business Intelligence     Enterprise Edition. (CVE-2020-2950)

  - The Bouncy Castle Java library before 1.51 does not     validate a point is withing the elliptic curve, which     makes it easier for remote attackers to obtain private     keys via a series of crafted elliptic curve Diffie     Hellman (ECDH) key exchanges, aka an invalid curve     attack. (CVE-2015-7940)

  - Apache Commons FileUpload before 1.3.3 DiskFileItem File     Manipulation Remote Code Execution (CVE-2016-1000031)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It was discovered that Bouncy Castle incorrectly handled certain crypto algorithms. A remote attacker could possibly use these issues to obtain sensitive information, including private keys.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Oracle JDeveloper installed on the remote host is missing a security patch. Please see the vendor advisory for additional information.

Indexing and Search Service 1u5-29.15600: core patch.
Date this patch was last updated by Sun : Jan/07/17

The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the January 2018 Critical Patch Update (CPU). It is, therefore, affected by multiple vulnerabilities.

  - A vulnerability in the PeopleSoft Enterprise HCM Human     Resources component of Oracle PeopleSoft Products     (subcomponent: Install (Bouncy Castle Java package)).
    Supported versions that are affected are 9.1 and 9.2.
    An unauthenticated attacker with network access via     HTTP can exploit the vulnerability to compromise     PeopleSoft Enterprise HCM Human Resources.
    A successful attacks of this vulnerability can result in     unauthorized read access to a subset of PeopleSoft     Enterprise HCM Human Resources accessible data.
    (CVE-2015-7940)

  - A vulnerability in the Oracle WebCenter Portal component     of Oracle Fusion Middleware (subcomponent: Security     Framework (Apache Struts 1)). Supported versions that are     affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. An     unauthenticated attacker with network access via HTTP     can exploit the vulnerability to compromise Oracle     WebCenter Portal. A successful attacks of this     vulnerability can result in a complete Denial-of-Service     of Oracle WebCenter Portal including the update, insert     or delete access to some of Oracle Web Portal accessible     data. (CVE-2016-1182)

  - A vulnerability in the Oracle WebCenter Portal component     of Oracle Fusion Middleware (subcomponent: WebCenter     Spaces Application). Supported versions that are affected     are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. An unauthenticated     attacker with network access via HTTP can exploit the     vulnerability to compromise Oracle WebCenter Portal.
    A successful attack require humans interaction to be effective     and can result in unauthorized creation, deletion or     modification access to Oracle WebCenter Portal data.
    (CVE-2018-2713)

According to its self-reported version, the Oracle iPlanet Web Server (formerly known as Sun Java System Web Server) running on the remote host is 7.0.x prior to 7.0.27 Patch 26834070. It is, therefore, affected by an unspecified vulnerability in the Network Security Services (NSS) library with unknown impact.

The version of Oracle HTTP Server installed on the remote host is affected by multiple vulnerabilities as noted in the January 2018 CPU advisory.

The version of Oracle Enterprise Manager Grid Control installed on the remote host is missing a security patch. It is, therefore, affected by multiple vulnerabilities :

  - A flaw exists in the Bouncy Castle Java library due to     improper validation of a point within the elliptic     curve. An unauthenticated, remote attacker can exploit     this to obtain private keys by using a series of     specially crafted elliptic curve Diffie-Hellman (ECDH)     key exchanges, also known as an 'invalid curve attack.'     (CVE-2015-7940)

  - A flaw exists in the PathTools module for Perl in the     File::Spec::canonpath() function that is triggered as     strings are returned as untainted even when passing     tainted input. An unauthenticated, remote attacker can     exploit this to pass unvalidated user input to sensitive     or insecure areas. (CVE-2015-8607)

  - An overflow condition exists in Perl in the MapPathA()     function due to improper validation of user-supplied     input. An unauthenticated, remote attacker can exploit     this to cause a denial of service condition or the     execution of arbitrary code. (CVE-2015-8608)

  - A remote code execution vulnerability exists in the     Apache Struts component due to improper handling of     multithreaded access to an ActionForm instance. An     unauthenticated, remote attacker can exploit this, via a     specially crafted multipart request, to execute     arbitrary code or cause a denial of service condition.
    (CVE-2016-1181)

  - A flaw exists in Perl that is triggered during the     handling of variables that appear twice in the     environment (envp), causing the last value to appear in     %ENV, while getenv would return the first. An     unauthenticated, remote attacker can exploit this to     cause variables to be incorrectly propagated to     subprocesses, regardless of the protections offered by     taint checking. (CVE-2016-2381)

  - A denial of service vulnerability exists in the Apache     Commons FileUpload component due to improper handling of     boundaries in content-type headers when handling file     upload requests. An unauthenticated, remote attacker can     exploit this to cause processes linked against the     library to become unresponsive. (CVE-2016-3092)

  - A man-in-the-middle vulnerability exists in various     components, known as 'httpoxy', due to a failure to     properly resolve namespace conflicts in accordance with     RFC 3875 section 4.1.18. The HTTP_PROXY environment     variable is set based on untrusted user data in the     'Proxy' header of HTTP requests. The HTTP_PROXY     environment variable is used by some web client     libraries to specify a remote proxy server. An     unauthenticated, remote attacker can exploit this, via a     crafted 'Proxy' header in an HTTP request, to redirect     an application's internal HTTP traffic to an arbitrary     proxy server where it may be observed or manipulated.
    (CVE-2016-5385, CVE-2016-5386, CVE-2016-5387,     CVE-2016-5388)

  - A carry propagating error exists in the OpenSSL     component in the x86_64 Montgomery squaring     implementation that may cause the BN_mod_exp() function     to produce incorrect results. An unauthenticated, remote     attacker with sufficient resources can exploit this to     obtain sensitive information regarding private keys.
    Moreover, the attacker would additionally need online     access to an unpatched system using the target private     key in a scenario with persistent DH parameters and a     private key that is shared between multiple clients. For     example, this can occur by default in OpenSSL DHE based     SSL/TLS cipher suites. (CVE-2017-3732)

  - An unspecified flaw exists in the UI Framework component    that allows authenticated, remote attacker to have an    impact on integrity. (CVE-2017-10091)

The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in the Enterprise Manager Base Platform component :

  - A flaw exists in the Bouncy Castle Java library due to     improper validation of a point within the elliptic     curve. An unauthenticated, remote attacker can exploit     this to obtain private keys by using a series of     specially crafted elliptic curve Diffie-Hellman (ECDH)     key exchanges, also known as an 'invalid curve attack.'     (CVE-2015-7940)

  - A flaw exists in Apache MyFaces Trinidad, specifically     in the CoreResponseStateManager component, due to the     ObjectInputStream and ObjectOutputStream strings being     used directly without securely deserializing Java input.
    An unauthenticated, remote attacker can exploit this,     via a deserialization attack using a crafted serialized     view state string, to have an unspecified impact that     may include the execution of arbitrary code.
    (CVE-2016-5019)

Note that the product was formerly known as Enterprise Manager Grid Control.

Security fix for CVE-2015-7940

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Tibor Jager, Jorg Schwenk, and Juraj Somorovsky, from Horst Gortz Institute for IT Security, published a paper in ESORICS 2015 where they describe an invalid curve attack in Bouncy Castle Crypto, a Java library for cryptography. An attacker is able to recover private Elliptic Curve keys from different applications, for example, TLS servers.

More information:
http://web-in-security.blogspot.ca/2015/09/practical-invalid-curve-att acks.htmlPractical Invalid Curve Attacks on TLS-ECDH:
http://euklid.org/pdf/ECC_Invalid_Curve.pdf

The Bouncy Castle Java library before 1.51 does not validate that a point is within the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an 'invalid curve attack.'

For Debian 6 'Squeeze', this issue has been fixed in version 1.44+dfsg-2+deb6u1 of bouncycastle.

Many thanks to upstream author Peter Dettmann who reviewed the backport that we prepared.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

bouncycastle was updated to version 1.53 to fix one security issue.

This security issue was fixed :

  - CVE-2015-7940: Invalid curve attack (bsc#951727).

ID	Name	Product	Family	Severity
135678	Oracle Business Intelligence Publisher Multiple Vulnerabilities (Apr 2020 CPU)	Nessus	Misc.	critical
111512	Ubuntu 14.04 LTS : Bouncy Castle vulnerabilities (USN-3727-1)	Nessus	Ubuntu Local Security Checks	high
111332	Oracle JDeveloper Information Disclosure Vulnerability (July 2018 CPU)	Nessus	Misc.	high
107538	Solaris 10 (sparc) : 142824-29	Nessus	Solaris Local Security Checks	medium
106759	Oracle WebCenter Portal Multiple Vulnerabilities (January 2018 CPU)	Nessus	Misc.	high
106349	Oracle iPlanet Web Server 7.0.x < 7.0.27 NSS Unspecified Vulnerability (January 2018 CPU)	Nessus	Web Servers	critical
106299	Oracle Fusion Middleware Oracle HTTP Server Multiple Vulnerabilities (January 2018 CPU)	Nessus	Web Servers	critical
101837	Oracle Enterprise Manager Grid Control Multiple Vulnerabilities (July 2017 CPU) (httpoxy)	Nessus	Misc.	critical
96777	Oracle Enterprise Manager Cloud Control Multiple Vulnerabilities (January 2017 CPU)	Nessus	Misc.	critical
89298	Fedora 22 : bouncycastle-1.50-8.fc22 (2015-7d95466eda)	Nessus	Fedora Local Security Checks	medium
87359	Debian DSA-3417-1 : bouncycastle - security update	Nessus	Debian Local Security Checks	medium
87266	Debian DLA-361-1 : bouncycastle security update	Nessus	Debian Local Security Checks	medium
86740	openSUSE Security Update : bouncycastle (openSUSE-2015-705)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2015-7940

critical

Tenable Plugins

critical

high

high

medium

high

critical

critical

critical

critical

medium

medium

medium

medium