Contents
What is POODLE in cyber security?
POODLE (Padding Oracle On Downgraded Legacy Encryption) is a security vulnerability that forces the downgrade of negotiated session protocol to SSLv3, a legacy protocol used to establish secure web communication (HTTPS).
What is Zombie POODLE?
Although not POODLE per se, Zombie POODLE is in many ways a resurrection of the well-known POODLE TLS (aka POODLE BITES or POODLE 2.0) attack. POODLE TLS and Zombie POODLE both exploit server stacks which behave differently when receiving TLS records with valid MAC and invalid (non-deterministic) padding.
Who uses TLS?
A primary use case of TLS is encrypting the communication between web applications and servers, such as web browsers loading a website. TLS can also be used to encrypt other communications such as email, messaging, and voice over IP (VoIP).
What is the security issue with the poodle?
The security issue is exactly what the name suggests, a protocol downgrade that allows exploits on an outdated form of encryption. The issue came to the world’s attention this month when Google released a paper called “This POODLE Bites: Exploiting The SSL 3.0 Fallback”.
Is there such a thing as a POODLE attack?
A POODLE attack is not the only SSL/TLS vulnerability. Others include the following: BEAST attack (CVE-2011-3389) vulnerability is a form of MiTM attack that uses a CBC algorithm in order to exploit vulnerabilities in a browser’s implementation of the SSL/TLS protocols.
When did the POODLE vulnerability hit the headlines?
The POODLE (Padding Oracle On Downgraded Legacy Encryption) vulnerability that hit the headlines last October was discovered by Google’s security team; the team found that by using a man-in-the-middle attack they could spoof packets sent between a website and a user to force a protocol downgrade, forcing the connection to use SSL 3.0.
Is the SSL 3.0 protocol vulnerable to the POODLE attack?
Some Transport Layer Security (TLS) implementations are also vulnerable to the POODLE attack. US-CERT is aware of a design vulnerability found in the way SSL 3.0 handles block cipher mode padding. The POODLE attack demonstrates how an attacker can exploit this vulnerability to decrypt and extract information from inside an encrypted transaction.