CVE-2007-4994

Description

Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new revocations that occur while a Certificate Revocation List (CRL) is being generated, which might prevent certain revoked certificates from appearing on the CRL quickly and allow users with revoked certificates to bypass the intended CRL.

References

https://rhn.redhat.com/errata/RHSA-2008-0566.html

http://www.vupen.com/english/advisories/2007/3406

http://www.vupen.com/english/advisories/2007/3405

http://www.securitytracker.com/id?1020532

http://www.securityfocus.com/bid/26377

http://www.redhat.com/support/errata/RHSA-2007-0934.html

http://secunia.com/advisories/27557

http://osvdb.org/40440

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS