CVE-2011-4197

etc/inc/certs.inc in the PKI implementation in pfSense before 2.0.1 creates each X.509 certificate with a true value for the CA basic constraint, which allows remote attackers to create sub-certificates for arbitrary subjects by leveraging the private key...

CVE-2011-4197

etc/inc/certs.inc in the PKI implementation in pfSense before 2.0.1 creates each X.509 certificate with a true value for the CA basic constraint, which allows remote attackers to create sub-certificates for arbitrary subjects by leveraging the private key...

CVE-2011-4197

CVE-2011-4197 concerns pfSense PKI before 2.0.1, where etc/inc/certs.inc sets the CA basic constraint to true for every issued X.509 certificate. This allows a holder of a pfSense-issued private key to create sub-certificates for arbitrary subjects. The entry is supported by NVD details and Matta...

CVE-2011-4197

etc/inc/certs.inc in the PKI implementation in pfSense before 2.0.1 creates each X.509 certificate with a true value for the CA basic constraint, which allows remote attackers to create sub-certificates for arbitrary subjects by leveraging the private key...

PT-2012-1821

Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.0.1 Description The issue is related to the PKI implementation in pfSense, where the etc/inc/certs.inc file creates X.509 certificates with a true value for the CA basic constraint. This allows remote attackers to...

CVE-2011-4197: Undefined Security Weakness

etc/inc/certs.inc in the PKI implementation in pfSense before 2.0.1 creates each X.509 certificate with a true value for the CA basic constraint, which allows remote attackers to create sub-certificates for arbitrary subjects by leveraging the private key...