Skip to content
OpenAdvisories
Unscored RHSA-2009:0007 3 CVEs

Red Hat Security Advisory: rhpki security and bug fix update

Published Sep 15, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · Certificate System 7 certificate_system:7.3 pkisetup 0:7.3.0-14.el4
Red Hat · Certificate System 7 certificate_system:7.3 rhpki-ca 0:7.3.0-17.el4
Red Hat · Certificate System 7 certificate_system:7.3 rhpki-common 0:7.3.0-40.el4
Red Hat · Certificate System 7 certificate_system:7.3 rhpki-kra 0:7.3.0-13.el4
Red Hat · Certificate System 7 certificate_system:7.3 rhpki-ocsp 0:7.3.0-11.el4
Red Hat · Certificate System 7 certificate_system:7.3 rhpki-ra 0:7.3.0-67.el4
Red Hat · Certificate System 7 certificate_system:7.3 rhpki-tks 0:7.3.0-12.el4
Red Hat · Certificate System 7 certificate_system:7.3 rhpki-tps 0:7.3.0-23.el4
Red Hat · Certificate System 7 certificate_system:7.3 rhpki-util 0:7.3.0-20.el4

Vulnerabilities 3

  • Unscored —
    CVE-2008-2367

    Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration fi…

  • Unscored —
    CVE-2008-2368

    Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log,…

  • Unscored —
    CVE-2008-5082

    The verifyProof function in the Token Processing System (TPS) component in Red Hat Certificate System (RHCS) 7.1 throug…

References

  • article
    http://www.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=451998
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452000
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=459049
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=475998
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0007.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-2367
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2367
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2367
  • report
    https://access.redhat.com/security/cve/CVE-2008-2368
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2368
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2368
  • report
    https://access.redhat.com/security/cve/CVE-2008-5082
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5082
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5082