CVE Vulnerability

CVE-2007-4994

Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new revocations that occur while a Certificate Revocation List (CRL) is being generated, which might prevent certain revoked certificates from appearing on the CRL quickly and allow users with revoked certificates to bypass the intended CRL.

7.5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
http://www.redhat.com/support/errata/RHSA-2007-0934.html
http://www.securityfocus.com/bid/26377
http://secunia.com/advisories/27557
https://rhn.redhat.com/errata/RHSA-2008-0566.html
http://www.securitytracker.com/id?1020532
http://osvdb.org/40440
http://www.vupen.com/english/advisories/2007/3405
http://www.vupen.com/english/advisories/2007/3406
Configurations

Configuration 1

cpe:2.3:a:redhat:certificate_server:7.2:*:*:*:*:*:*:*
Information

Published : 2007-11-06 09:46

Updated : 2011-03-08 02:59

NVD link : CVE-2007-4994

Mitre link : CVE-2007-4994

Products Affected
No products.
CWE
CWE-255