CVE-2007-4994
First published: Tue Nov 06 2007(Updated: )
Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new revocations that occur while a Certificate Revocation List (CRL) is being generated, which might prevent certain revoked certificates from appearing on the CRL quickly and allow users with revoked certificates to bypass the intended CRL.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Redhat Certificate Server | =7.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.redhat.com/support/errata/RHSA-2007-0934.html
- http://www.securityfocus.com/bid/26377
- http://secunia.com/advisories/27557
- https://rhn.redhat.com/errata/RHSA-2008-0566.html
- http://www.securitytracker.com/id?1020532
- http://osvdb.org/40440
- http://www.vupen.com/english/advisories/2007/3405
- http://www.vupen.com/english/advisories/2007/3406
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-historical
- collector/nvd-index
- vendor/redhat
- canonical/redhat certificate server
- version/redhat certificate server/7.2