CVE-2008-1676 Security feature bypass in n/a
Attackers can bypass certificate authority profile constraints to issue malicious certificates, enabling man-in-the-middle attacks.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-1676?
CVE-2008-1676 is a high-severity vulnerability in n/a, published on 7 Jul 2008. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Red Hat PKI Common Framework (rhpki-common) in Red Hat Certificate System (aka Certificate Server or RHCS) 7.1 through 7.3, and Netscape Certificate Management System 6.x, does not recognize Certificate Authority profile constraints on Extensions, which might allow remote attackers to bypass intended restrictions and conduct man-in-the-middle attacks by submitting a certificate signing request (CSR) and using the resulting certificate.
Weakness: CWE-255
Which versions are affected by CVE-2008-1676?
It affects 1 product.
Linux distribution packages (2)
rhpki-common Red Hat:certificate_system:7.2 | All versions | 0:7.2.0-11 |
rhpki-common Red Hat:certificate_system:7.3 | All versions | 0:7.3.0-29.el4 |
Products include Netscape Certificate Management System.
How do I fix CVE-2008-1676?
Apply the vendor's patch.
Is CVE-2008-1676 being exploited?
There is no known exploitation of CVE-2008-1676 in the wild and no public exploit code.
Sources
Also known as GHSA-6434-hff7-vgp8, RHSA-2008:0500, RHSA-2008:0577.