CVE-2008-1676: High severity red hat certificate system vulnerability
A flaw was found in a way Red Hat Certificate System handled Extensions in the certificate signing requests (CSR). All requested Extensions were added to issued certificate despite constraints defined in Certificate Authority (CA) profile.
For example, CSR could contain Basic Constraints or Key Usage constraint that once copied to issued certificate would result in creation of subordinate CA certificate, even though CA configuration prohibits issuing of subordinate CA certificate, possibly leading to a bypass the intended security policy.
Affected versions: Red Hat Certificate System 7.1, 7.2, 7.3 Netscape Certificate Management System 6.x
Other sources
Red Hat PKI Common Framework (rhpki-common) in Red Hat Certificate System (aka Certificate Server or RHCS) 7.1 through 7.3, and Netscape Certificate Management System 6.x, does not recognize Certificate Authority profile constraints on Extensions, which might allow remote attackers to bypass intended restrictions and conduct man-in-the-middle attacks by submitting a certificate signing request (CSR) and using the resulting certificate.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1676?
CVE-2008-1676 is considered to have a medium severity level due to improper handling of certificate extensions.
How do I fix CVE-2008-1676?
To fix CVE-2008-1676, ensure that your version of the Red Hat Certificate System is updated to the latest patch version.
What systems are affected by CVE-2008-1676?
CVE-2008-1676 affects Red Hat Certificate System versions 7.1, 7.2, and 7.3, as well as various versions of the Netscape Certificate Management System.
What are the potential consequences of CVE-2008-1676?
The consequences of CVE-2008-1676 include improperly issued certificates that may not respect the defined constraints, potentially compromising security.
Can CVE-2008-1676 be exploited remotely?
CVE-2008-1676 does not specify a remote exploitation vector, but it could lead to the issuance of unauthorized certificates if exploited.