CVEvulnerability
CVE-2007-4994
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-11-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-255
Description
Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new revocations that occur while a Certificate Revocation List (CRL) is being generated, which might prevent certain revoked certificates from appearing on the CRL quickly and allow users with revoked certificates to bypass the intended CRL.
Affected configurations
• redhat certificate server 7.2
Related
Weakness · not in database (1)
References
- http://osvdb.org/40440 osvdb.org
- http://secunia.com/advisories/27557 secunia.com
- http://www.redhat.com/support/errata/RHSA-2007-0934.html www.redhat.com
- http://www.securityfocus.com/bid/26377 www.securityfocus.com
- http://www.securitytracker.com/id?1020532 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3405 www.vupen.com
- http://www.vupen.com/english/advisories/2007/3406 www.vupen.com
- https://rhn.redhat.com/errata/RHSA-2008-0566.html rhn.redhat.com
- http://osvdb.org/40440 osvdb.org
- http://secunia.com/advisories/27557 secunia.com
- http://www.redhat.com/support/errata/RHSA-2007-0934.html www.redhat.com
- http://www.securityfocus.com/bid/26377 www.securityfocus.com
- http://www.securitytracker.com/id?1020532 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3405 www.vupen.com
- http://www.vupen.com/english/advisories/2007/3406 www.vupen.com
- https://rhn.redhat.com/errata/RHSA-2008-0566.html rhn.redhat.com