Red Hat Security Advisory

RHSA-2010:0837

rhpki security and enhancement update

Released 2010-11-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Certificate System 7.3 for 4AS rhpki-ca-7.3.0-21.el4, rhpki-common-7.3.0-41.el4, rhpki-util-7.3.0-21.el4
Red Hat Certificate System 7.3 for 4ES rhpki-ca-7.3.0-21.el4, rhpki-common-7.3.0-41.el4, rhpki-util-7.3.0-21.el4

Fixes 3 records

TI-2004-02631 CVE-2004-2761 · GHSA-2q4p-93p8-q2j6

The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for…

MEDIUM 61

The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm of a…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.10122 Published 2009-01-05 Fixed CWE-328

TI-2010-03674 CVE-2010-3868 · GHSA-hg35-p8x7-fw5f

Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require…

LOW 29

Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01284 Published 2010-11-17 Fixed CWE-287

TI-2010-03675 CVE-2010-3869 · GHSA-5f9q-v927-crw8

Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System allow remote…

LOW 20

Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.00781 Published 2010-11-17 Fixed CWE-310