Skip to content
OpenAdvisories
Critical RHSA-2010:0837 3 CVEs

Red Hat Security Advisory: rhpki security and enhancement update

Published Sep 15, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · Certificate System 7 certificate_system:7.3 rhpki-ca 0:7.3.0-21.el4
Red Hat · Certificate System 7 certificate_system:7.3 rhpki-common 0:7.3.0-41.el4
Red Hat · Certificate System 7 certificate_system:7.3 rhpki-util 0:7.3.0-21.el4

Vulnerabilities 3

  • Critical 9.8
    CVE-2004-2761 Public exploit EPSS 10%

    The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to c…

  • Unscored —
    CVE-2010-3868

    Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to…

  • Unscored —
    CVE-2010-3869

    Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate …

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=648882
  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=648883
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=648886
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0837.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-2761
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-2761
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-2761
  • report
    https://access.redhat.com/security/cve/CVE-2010-3868
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3868
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3868
  • report
    https://access.redhat.com/security/cve/CVE-2010-3869
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3869
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3869