← back
CVE-2007-4994

CVE-2007-4994

EPSS 1.1%
Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new revocations that occur while a Certificate Revocation List (CRL) is being generated, which might prevent certain revoked certificates from appearing on the CRL quickly and allow users with revoked certificates to bypass the intended CRL.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://osvdb.org/40440http://secunia.com/advisories/27557https://rhn.redhat.com/errata/RHSA-2008-0566.htmlhttp://www.redhat.com/support/errata/RHSA-2007-0934.htmlhttp://www.securityfocus.com/bid/26377http://www.securitytracker.com/id?1020532http://www.vupen.com/english/advisories/2007/3405http://www.vupen.com/english/advisories/2007/3406