CVE-2007-4994

HIGH 7.5CVE-2007-4994 · Published 06/11/2007 · updated 16/06/2026

In short

CVE-2007-4994 is a HIGH (CVSS 7.5) vulnerability affecting certificate server (redhat).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
certificate server redhat	`= 7.2`	No fix yet

Description

Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new revocations that occur while a Certificate Revocation List (CRL) is being generated, which might prevent certain revoked certificates from appearing on the CRL quickly and allow users with revoked certificates to bypass the intended CRL.

References

osvdb.org/40440
secunia.com/advisories/27557
redhat.com/support/errata/RHSA-2007-0934.html
securityfocus.com/bid/26377
securitytracker.com/id
vupen.com/english/advisories/2007/3405
vupen.com/english/advisories/2007/3406
rhn.redhat.com/errata/RHSA-2008-0566.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free