Bug 304571 (CVE-2007-4994)

Summary:	CVE-2007-4994 rhcs CRL can get corrupted
Product:	[Other] Security Response	Reporter:	Mark J. Cox <mjc>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	Keywords:	Security
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2008-01-14 16:19:19 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	243176, 304581, 304591
Bug Blocks:

Description Mark J. Cox 2007-09-25 08:12:30 UTC

New revocations performed while a CRL is being generated
could potentially cause revoked certificates at the upper
end of the serial number range to not appear on the CRL.

In subsequent CRLs, those missing certificates could again
appear on the CRL.

Comment 2 Mark J. Cox 2007-09-25 08:15:51 UTC

CVSS base score 3.6:

AccessVector: Network
AccessComplexity: High (you have no way of making a particular certificate
become unrevoked, just chance)
Authentication: Single (you need an otherwise valid but revoked certificate)
ConfImpact: Partial
AvailImpact: None
IntegImpact: Partial

Comment 5 Mark J. Cox 2007-10-08 07:31:55 UTC

removing embargo.

Comment 6 Red Hat Product Security 2008-01-14 16:19:19 UTC

This issue was addressed in:

Red Hat Certificate System:
  http://rhn.redhat.com/errata/RHSA-2007-0934.html