CVE-2014-1959: Undefined Security Weakness

lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates...

PT-2014-2069

Name of the Vulnerable Software and Affected Versions GnuTLS versions prior to 2.7.6 Description The issue allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates. This occurs when the GNUTLS VERIFY ALLOW X509 V1 CA...

PT-2014-1895

Name of the Vulnerable Software and Affected Versions GnuTLS versions prior to 3.1.21 GnuTLS versions 3.2.x prior to 3.2.11 Description The issue allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates. This is becau...