PT-2012-1821

CVE-2011-4197

·

Published

2012-01-03

·

Updated

2017-08-29

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.0.1
Description The issue is related to the PKI implementation in pfSense, where the etc/inc/certs.inc file creates X.509 certificates with a true value for the CA basic constraint. This allows remote attackers to create sub-certificates for arbitrary subjects by leveraging the private key.
Recommendations For versions prior to 2.0.1, update to version 2.0.1 or later to resolve the issue.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2011-4197
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com