Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Certificate_system | Redhat | 7.3 (including) | 7.3 (including) |
| Certificate_system | Redhat | 8 (including) | 8 (including) |
| Red Hat Certificate System 7.3 | RedHat | rhpki-ca-0:7.3.0-21.el4 | * |
| Red Hat Certificate System 7.3 | RedHat | rhpki-common-0:7.3.0-41.el4 | * |
| Red Hat Certificate System 7.3 | RedHat | rhpki-util-0:7.3.0-21.el4 | * |
| Red Hat Certificate System 8 | RedHat | pki-ca-0:8.0.7-1.el5pki | * |
| Red Hat Certificate System 8 | RedHat | pki-common-0:8.0.6-2.el5pki | * |
| Red Hat Certificate System 8 | RedHat | pki-util-0:8.0.5-1.el5pki | * |
References
- http://secunia.com/advisories/42181
- http://securitytracker.com/id?1024697
- http://www.osvdb.org/69148
- https://bugzilla.redhat.com/show_bug.cgi?id=648883
- https://fedorahosted.org/pki/changeset/1246
- https://rhn.redhat.com/errata/RHSA-2010-0837.html
- https://rhn.redhat.com/errata/RHSA-2010-0838.html
- http://secunia.com/advisories/42181
- http://securitytracker.com/id?1024697
- http://www.osvdb.org/69148
- https://bugzilla.redhat.com/show_bug.cgi?id=648883
- https://fedorahosted.org/pki/changeset/1246
- https://rhn.redhat.com/errata/RHSA-2010-0837.html
- https://rhn.redhat.com/errata/RHSA-2010-0838.html