SSL / TLS Renegotiation Handshakes MiTM Plaintext Data Injection
Medium Nessus Plugin ID 42880
SynopsisThe remote service allows insecure renegotiation of TLS / SSL connections.
DescriptionThe remote service encrypts traffic using TLS / SSL but allows a client to insecurely renegotiate the connection after the initial handshake.
An unauthenticated, remote attacker may be able to leverage this issue to inject an arbitrary amount of plaintext into the beginning of the application protocol stream, which could facilitate man-in-the-middle attacks if the service assumes that the sessions before and after renegotiation are from the same 'client' and merges them at the application layer.
SolutionContact the vendor for specific patch information.