Skip to content
OpenAdvisories
Critical RHSA-2010:0838 3 CVEs

Red Hat Security Advisory: pki security and enhancement update

Published Sep 15, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · Certificate System 8 certificate_system:8::el5 pki-ca 0:8.0.7-1.el5pki
Red Hat · Certificate System 8 certificate_system:8::el5 pki-common 0:8.0.6-2.el5pki
Red Hat · Certificate System 8 certificate_system:8::el5 pki-common-javadoc 0:8.0.6-2.el5pki
Red Hat · Certificate System 8 certificate_system:8::el5 pki-util 0:8.0.5-1.el5pki
Red Hat · Certificate System 8 certificate_system:8::el5 pki-util-javadoc 0:8.0.5-1.el5pki

Vulnerabilities 3

  • Critical 9.8
    CVE-2004-2761 Public exploit EPSS 10%

    The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to c…

  • Unscored —
    CVE-2010-3868

    Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to…

  • Unscored —
    CVE-2010-3869

    Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate …

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=648882
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=648883
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=648886
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0838.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-2761
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-2761
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-2761
  • report
    https://access.redhat.com/security/cve/CVE-2010-3868
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3868
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3868
  • report
    https://access.redhat.com/security/cve/CVE-2010-3869
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3869
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3869