Aruba Networks / Alcatel-Lucent Private Key Disclosure

2016-09-06T00:00:00
ID PACKETSTORM:138611
Type packetstorm
Reporter Stefan Viehbock
Modified 2016-09-06T00:00:00

Description

                                        
                                            `This advisory is accompanied by a blog post regarding a recap on our published  
"House of Keys" research study on the re-use of cryptographic secrets from  
11/2015.  
  
For further information also see  
http://blog.sec-consult.com/2016/09/house-of-keys-9-months-later-40-worse.html  
  
  
SEC Consult Vulnerability Lab Security Advisory < 20160906-0 >  
=======================================================================  
title: Private Key For Browser-Trusted Certificate Embedded  
In Firmware  
product: multiple Aruba Networks / Alcatel-Lucent products  
vulnerable version: see Vulnerable / tested versions  
fixed version: -  
CVE number:  
impact: High  
homepage: http://www.arubanetworks.com/  
http://enterprise.alcatel-lucent.com/  
found: 2015-05-15  
by: Stefan ViehbAPck (Office Vienna)  
SEC Consult Vulnerability Lab  
  
An integrated part of SEC Consult  
Bangkok - Berlin - Linz - Montreal - Moscow  
Singapore - Vienna (HQ) - Vilnius - Zurich  
  
https://www.sec-consult.com  
=======================================================================  
  
Vendor description:  
-------------------  
"Aruba, a Hewlett Packard Enterprise company, (formerly "Aruba Networks, Inc.")  
is a networking vendor selling enterprise wireless LAN and edge access  
networking equipment. The company has over 1,800 employees and is  
headquartered in Sunnyvale, California. Aruba's core products are access points  
(APs), mobility controllers, and network management software through their  
Airwave Management Platform product."  
  
Source: https://en.wikipedia.org/wiki/Aruba_Networks  
  
  
Vulnerability overview/description:  
-----------------------------------  
A browser-trusted certificate (CN: securelogin.arubanetworks.com, signed by  
GeoTrust) including its private key is embedded in the firmware of several  
Aruba Networks/Alcatel-Lucent products. The certificate is used for providing  
user access to a captive portal and web administration via HTTPS as well as  
EAP  
connections for WPA2-Enterprise clients.  
  
An attacker can use this vulnerability to impersonate a captive portal, web  
administration or Wi-Fi AP and gain access to sensitive information.  
  
The certificate is compromised and should be revoked. Users should be told to  
install certificates generated by themselves.  
  
  
Proof of concept:  
-----------------  
OpenSSL text output for certificate:  
Certificate:  
Data:  
Version: 3 (0x2)  
Serial Number: 121426 (0x1da52)  
Signature Algorithm: sha1WithRSAEncryption  
Issuer: C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV  
SSL CA  
Validity  
Not Before: May 11 01:22:10 2011 GMT  
Not After : Aug 11 04:40:59 2017 GMT  
Subject: serialNumber=lLUge2fRPkWcJe7boLSVdsKOFK8wv3MF, C=US,  
O=securelogin.arubanetworks.com, OU=GT28470348, OU=See  
www.geotrust.com/resources/cps (c)11, OU=Domain Control Validated - QuickSSL(R)  
Premium, CN=securelogin.arubanetworks.com  
Subject Public Key Info:  
Public Key Algorithm: rsaEncryption  
Public-Key: (2048 bit)  
Modulus:  
00:d1:b5:ee:fb:d4:89:e9:89:94:c7:15:3a:e4:42:  
26:ec:64:aa:db:23:ec:2f:66:0e:1d:39:e0:47:63:  
85:76:c6:40:1d:c9:b4:d0:db:90:bf:b9:b2:bf:eb:  
17:96:a4:5d:fb:22:8c:c8:8c:4c:24:58:13:9d:16:  
c7:0f:10:58:b8:b0:20:89:11:ea:77:67:9c:6b:75:  
3b:8c:e6:bf:0a:db:64:56:4b:ab:63:a0:e5:2d:c2:  
61:d0:b3:b5:e8:4a:c5:f0:b2:c8:bd:29:96:a3:c4:  
7a:00:4b:bb:4d:5c:51:af:a7:ba:4a:a4:80:31:75:  
19:f3:93:0f:ed:46:68:60:7f:4d:42:7e:07:f0:22:  
45:0f:e3:ac:97:10:2f:dc:08:aa:10:c2:48:51:58:  
5f:12:09:52:88:5e:59:cf:59:82:2a:90:36:26:e7:  
46:84:bc:ee:16:b1:a5:ee:05:c7:73:8d:35:2f:40:  
d9:2b:c8:bf:15:39:63:64:ae:a8:96:13:e5:7c:0f:  
d1:0f:f9:4c:26:4a:0b:dd:4d:65:4b:ff:49:e7:7e:  
f1:51:17:21:fc:dc:fd:12:57:37:b0:cf:7c:90:b7:  
28:84:d5:66:5f:ca:a8:63:81:f0:1a:e5:26:50:7a:  
af:b9:d0:e7:42:05:ee:47:16:67:a8:b2:41:31:21:  
97:87  
Exponent: 65537 (0x10001)  
X509v3 extensions:  
X509v3 Authority Key Identifier:  
keyid:8C:F4:D9:93:0A:47:BC:00:A0:4A:CE:4B:75:6E:A0:B6:B0:B2:7E:FC  
X509v3 Key Usage: critical  
Digital Signature, Key Encipherment  
X509v3 Extended Key Usage:  
TLS Web Server Authentication, TLS Web Client Authentication  
X509v3 Subject Alternative Name:  
DNS:securelogin.arubanetworks.com  
X509v3 CRL Distribution Points:  
Full Name:  
URI:http://gtssldv-crl.geotrust.com/crls/gtssldv.crl  
X509v3 Subject Key Identifier:  
9D:D0:E4:66:DD:8E:FB:CF:EA:E4:96:52:CC:92:29:67:D5:D3:32:E8  
X509v3 Basic Constraints: critical  
CA:FALSE  
Authority Information Access:  
CA Issuers - URI:http://gtssldv-aia.geotrust.com/gtssldv.crt  
Signature Algorithm: sha1WithRSAEncryption  
26:63:34:5a:e4:51:61:d9:92:25:35:f8:62:36:cc:5e:7c:6a:  
94:72:41:ec:e7:60:10:d0:a7:b9:f7:f0:0b:a6:d2:97:b0:2b:  
3e:10:81:ac:20:75:38:d9:c0:0c:50:f2:01:ed:fc:2e:fb:be:  
1b:0b:e9:45:49:38:2a:1c:b1:b7:13:27:ef:7b:b2:2d:b9:3c:  
0d:85:7e:1e:f0:36:1e:de:80:ef:d7:ad:9c:d0:c2:a1:b7:e0:  
d6:51:5a:e5:c7:c4:fa:2a:a6:95:af:93:41:ee:6e:37:ee:08:  
d5:b0:12:9f:35:2d:a1:e4:b0:b9:06:6d:35:39:59:72:21:8e:  
c2:59:11:a0:4d:ac:e0:1c:5f:d0:36:05:b0:98:da:57:24:92:  
12:8b:bd:da:cd:d4:83:b9:52:42:4d:9a:40:0b:38:86:51:8f:  
a7:ea:dd:d9:1f:1b:31:db:10:76:2d:18:1c:14:9b:9b:13:f5:  
4f:4c:c0:61:9a:a0:58:42:a8:dc:8e:66:d4:a2:87:93:c5:48:  
a1:2d:f3:99:29:92:44:bb:2a:0b:2a:7f:75:4f:3d:a6:42:1f:  
84:f2:24:0d:0d:7d:aa:bb:bc:00:af:a5:ad:55:ba:ee:3f:d3:  
60:dd:70:06:80:ea:56:35:48:16:9f:47:f0:7a:0d:0b:be:ef:  
20:54:63:1c  
  
Certificate:  
-----BEGIN CERTIFICATE-----  
MIIFIjCCBAqgAwIBAgIDAdpSMA0GCSqGSIb3DQEBBQUAMGExCzAJBgNVBAYTAlVTM  
RYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQLExREb21haW4gVmFsaWRhdG  
VkIFNTTDEbMBkGA1UEAxMSR2VvVHJ1c3QgRFYgU1NMIENBMB4XDTExMDUxMTAxMjI  
xMFoXDTE3MDgxMTA0NDA1OVowggEJMSkwJwYDVQQFEyBsTFVnZTJmUlBrV2NKZTdi  
b0xTVmRzS09GSzh3djNNRjELMAkGA1UEBhMCVVMxJjAkBgNVBAoTHXNlY3VyZWxvZ  
2luLmFydWJhbmV0d29ya3MuY29tMRMwEQYDVQQLEwpHVDI4NDcwMzQ4MTEwLwYDVQ  
QLEyhTZWUgd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvY3BzIChjKTExMTcwNQY  
DVQQLEy5Eb21haW4gQ29udHJvbCBWYWxpZGF0ZWQgLSBRdWlja1NTTChSKSBQcmVt  
aXVtMSYwJAYDVQQDEx1zZWN1cmVsb2dpbi5hcnViYW5ldHdvcmtzLmNvbTCCASIwD  
QYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANG17vvUiemJlMcVOuRCJuxkqtsj7C  
9mDh054EdjhXbGQB3JtNDbkL+5sr/rF5akXfsijMiMTCRYE50Wxw8QWLiwIIkR6nd  
nnGt1O4zmvwrbZFZLq2Og5S3CYdCztehKxfCyyL0plqPEegBLu01cUa+nukqkgDF1  
GfOTD+1GaGB/TUJ+B/AiRQ/jrJcQL9wIqhDCSFFYXxIJUoheWc9ZgiqQNibnRoS87  
haxpe4Fx3ONNS9A2SvIvxU5Y2SuqJYT5XwP0Q/5TCZKC91NZUv/Sed+8VEXIfzc/R  
JXN7DPfJC3KITVZl/KqGOB8BrlJlB6r7nQ50IF7kcWZ6iyQTEhl4cCAwEAAaOCATc  
wggEzMB8GA1UdIwQYMBaAFIz02ZMKR7wAoErOS3VuoLawsn78MA4GA1UdDwEB/wQE  
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwKAYDVR0RBCEwH4Idc  
2VjdXJlbG9naW4uYXJ1YmFuZXR3b3Jrcy5jb20wQQYDVR0fBDowODA2oDSgMoYwaH  
R0cDovL2d0c3NsZHYtY3JsLmdlb3RydXN0LmNvbS9jcmxzL2d0c3NsZHYuY3JsMB0  
GA1UdDgQWBBSd0ORm3Y77z+rkllLMkiln1dMy6DAMBgNVHRMBAf8EAjAAMEcGCCsG  
AQUFBwEBBDswOTA3BggrBgEFBQcwAoYraHR0cDovL2d0c3NsZHYtYWlhLmdlb3Ryd  
XN0LmNvbS9ndHNzbGR2LmNydDANBgkqhkiG9w0BAQUFAAOCAQEAJmM0WuRRYdmSJT  
X4YjbMXnxqlHJB7OdgENCnuffwC6bSl7ArPhCBrCB1ONnADFDyAe38Lvu+GwvpRUk  
4KhyxtxMn73uyLbk8DYV+HvA2Ht6A79etnNDCobfg1lFa5cfE+iqmla+TQe5uN+4I  
1bASnzUtoeSwuQZtNTlZciGOwlkRoE2s4Bxf0DYFsJjaVySSEou92s3Ug7lSQk2aQ  
As4hlGPp+rd2R8bMdsQdi0YHBSbmxP1T0zAYZqgWEKo3I5m1KKHk8VIoS3zmSmSRL  
sqCyp/dU89pkIfhPIkDQ19qru8AK+lrVW67j/TYN1wBoDqVjVIFp9H8HoNC77vIFR  
jHA==  
-----END CERTIFICATE-----  
  
Private Key:  
-----BEGIN RSA PRIVATE KEY-----  
MIIEpQIBAAKCAQEA0bXu+9SJ6YmUxxU65EIm7GSq2yPsL2YOHTngR2OFdsZAHcm00  
NuQv7myv+sXlqRd+yKMyIxMJFgTnRbHDxBYuLAgiRHqd2eca3U7jOa/CttkVkurY6  
DlLcJh0LO16ErF8LLIvSmWo8R6AEu7TVxRr6e6SqSAMXUZ85MP7UZoYH9NQn4H8CJ  
FD+OslxAv3AiqEMJIUVhfEglSiF5Zz1mCKpA2JudGhLzuFrGl7gXHc401L0DZK8i/  
FTljZK6olhPlfA/RD/lMJkoL3U1lS/9J537xURch/Nz9Elc3sM98kLcohNVmX8qoY  
4HwGuUmUHqvudDnQgXuRxZnqLJBMSGXhwIDAQABAoIBAQCbwEXIX2g2POp0mb3tfX  
wvIe0LaLin02I0LqH2I2Iifsdr2D0kyY3N93tcspwIU/dA574rzJdYftnCWAJrm7Z  
pJNZlNxsup5My9BTQZygIRj1VIkoeaocL30yKlo5KAg7U39PbOiIZa3k48wYfRKue  
jDH98gMLuG8XymeP0DUBRPKkPV9gQSIaJlyhK8DqC3krC6cE3FIdK4RfDOqinUqff  
iVYnNc3qaHrWOO0lnduG5ngRgE6XipUrjf3Y/JfqpEHhjGW4TNZ+2j9U7Vnwp22sc  
+/F4SCEDXYC5dGzdgRlTALSe/UNCctB2DcYdSmBqHfekJ1YtXoeLNrcabQIgCRAoG  
BAO74O2KbY/kkw3W0XMJsGHJLK0hKCW4WMZl2pqfPwkoXNWJIPl7GYrGnBIQ75fZn  
ddlq6Gq8ZfDUZlbE07JAEXUeyNd0m6emqOm7q+v8aY0AKnsH+X2nHI7caYQJu0s5A  
y8IB9fdhmpFX40C77M8KJIXIvYjRI7ulJF3ZJBiCOPVAoGBAOCn5mrmcFaxkvuSUs  
90OmF0rHVdaNgsFaaFc3B9H9flh7fX38M1ZCBIR01yaPciJOLMsAaBe1UMnaw1rWf  
mlnVGt9khFCU2f2IlWc3oPGnkQBhTUrOhufOJg+JzDoS4CiMpQD0yT+FABgSdD+Y4  
f8+IFjoqagFyU/l+VAWPtyfrAoGBALn+6THRollrfNqjPENzIP/sc867GWXezlIU4  
Jfig+Vo9Pr/IdRgcra1OTW27UEAu+Aybp2M74cnulO0tNSbOzs+b7IKp5Awjm4FzU  
VK29iMFYRW66AaLocfFN1ZObbNtCWqCXjBifoy7rDxZSHLJAS5D1QmlRjupyIlnFc  
ohqTVAoGBAKLIJgZpiRbYPnd5E/Xr8u1wvBGiqHiSoPFzGy10DKHEWC3XBvUMd8uI  
c9njP7lqjS2lQRrFsZbzuD/y+P4jL/w0TLzQ4icAsRZtl//B+hyEXgkCPxeX5QRZL  
S3lTqzOKdJGbpypGwZM/M9U+xNG9x1qLyjgWMVJkR1j8v/AnecXAoGALItcXppPW3  
TvBQ4KTT/VFz/A/isT7dryB+C6O7FnAf9uGE6w2NlCmmt8Ak5hCo+ZixI1iXudKq7  
DdDm31W27PMugRMrn89ghoe3FiKbI7ISVWJKiulo2Pcb3yy5ZDiqMkVcmvmCPzahz  
Das7gZ8UdS0D0Tt6h5dim5BnLvQCQPo=  
-----END RSA PRIVATE KEY-----  
  
  
Vulnerable / tested versions:  
-----------------------------  
This vulnerability is not dependent on specific products/versions. We  
found the certificate and private key in firmware for various Alcatel-Lucent  
OmniAccess products, potentially other products are affected as well.  
  
According to Aruba, "The certificate "securelogin.arubanetworks.com", and  
its associated private key, is distributed on every controller and in  
every software release."  
  
  
Vendor contact timeline:  
------------------------  
2015-05-21: Contacting vendor through sirt@arubanetworks.com, answer  
regarding affected products  
2015-05-28: Update from Aruba, certificate for "securelogin.arubanetworks.com"  
will not be changed; documentation will be updated to reflect  
security issues.  
2015-06-08: Certificate will not be revoked, announcement available here:  
  
http://community.arubanetworks.com/t5/Unified-Wired-Wireless-Access/Certificate-quot-securelogin-arubanetworks-com-quot/td-p/239148  
2015-11-25: "House of Keys" research study published regarding re-use of  
crypto secrets in firmware of multiple vendors (advisory postponed)  
2016-09-05: Follow-up on "House of Keys", publication of Aruba advisory  
  
  
Solution:  
---------  
None available.  
  
  
Workaround:  
-----------  
Users should install a custom certificate signed by a trusted CA.  
  
  
Advisory URL:  
-------------  
https://www.sec-consult.com/en/Vulnerability-Lab/Advisories.htm  
  
  
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  
  
SEC Consult Vulnerability Lab  
  
SEC Consult  
Bangkok - Berlin - Linz - Montreal - Moscow  
Singapore - Vienna (HQ) - Vilnius - Zurich  
  
About SEC Consult Vulnerability Lab  
The SEC Consult Vulnerability Lab is an integrated part of SEC Consult. It  
ensures the continued knowledge gain of SEC Consult in the field of network  
and application security to stay ahead of the attacker. The SEC Consult  
Vulnerability Lab supports high-quality penetration testing and the evaluation  
of new offensive and defensive technologies for our customers. Hence our  
customers obtain the most current information about vulnerabilities and valid  
recommendation about the risk profile of new technologies.  
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  
Interested to work with the experts of SEC Consult?  
Send us your application https://www.sec-consult.com/en/Career.htm  
Interested in improving your cyber security with the experts of SEC Consult?  
Contact our local offices https://www.sec-consult.com/en/About/Contact.htm  
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  
Mail: research at sec-consult dot com  
Web: https://www.sec-consult.com  
Blog: http://blog.sec-consult.com  
Twitter: https://twitter.com/sec_consult  
  
EOF Stefan ViehbAPck / @2016  
  
`