CVE-2008-1676
Red Hat PKI Common Framework (rhpki-common) in Red Hat Certificate System (aka Certificate Server...
Red Hat PKI Common Framework (rhpki-common) in Red Hat Certificate System (aka Certificate Server or RHCS) 7.1 through 7.3, and Netscape Certificate Management System 6.x, does not recognize Certificate Authority profile constraints on Extensions, which might allow remote attackers to bypass intended restrictions and conduct man-in-the-middle attacks by submitting a certificate signing request (CSR) and using the resulting certificate.
Exploit likelihood
What each source reports
NVD Score used
Red Hat PKI Common Framework (rhpki-common) in Red Hat Certificate System (aka Certificate Server or RHCS) 7.1 through 7.3, and Netscape Certificate Management System 6.x, does not recognize Certificate Authority profile constraints on Extensions, which might allow remote attackers to bypass intended restrictions and conduct man-in-the-middle attacks by submitting a certificate signing request (CSR) and using the resulting certificate.
- Record
CVE-2008-1676- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE List No score
Red Hat PKI Common Framework (rhpki-common) in Red Hat Certificate System (aka Certificate Server or RHCS) 7.1 through 7.3, and Netscape Certificate Management System 6.x, does not recognize Certificate Authority profile constraints on Extensions, which might allow remote attackers to bypass intended restrictions and conduct man-in-the-middle attacks by submitting a certificate signing request (CSR) and using the resulting certificate.
- Record
CVE-2008-1676- Updated
- 2026-11-02
EUVDEUVD-2008-1677 No score
Red Hat PKI Common Framework (rhpki-common) in Red Hat Certificate System (aka Certificate Server or RHCS) 7.1 through 7.3, and Netscape Certificate Management System 6.x, does not recognize Certificate Authority profile constraints on Extensions, which might allow remote attackers to bypass intended restrictions and conduct man-in-the-middle attacks by submitting a certificate signing request (CSR) and using the resulting certificate.
- Record
EUVD-2008-1677- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6434-hff7-vgp8 No score
Red Hat PKI Common Framework (rhpki-common) in Red Hat Certificate System (aka Certificate Server...
Red Hat PKI Common Framework (rhpki-common) in Red Hat Certificate System (aka Certificate Server or RHCS) 7.1 through 7.3, and Netscape Certificate Management System 6.x, does not recognize Certificate Authority profile constraints on Extensions, which might allow remote attackers to bypass intended restrictions and conduct man-in-the-middle attacks by submitting a certificate signing request (CSR) and using the resulting certificate.
- Record
GHSA-6434-hff7-vgp8- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rhpki-commonRed Hat:certificate_system:7.3 |
before 0:7.3.0-29.el4 | 0:7.3.0-29.el4 |
rhpki-commonRed Hat:certificate_system:7.2 |
before 0:7.2.0-11 | 0:7.2.0-11 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-1676 is a high vulnerability (CVSS 7.5) in Netscape Certificate Management System, published July 7, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.07%, the 65th percentile. Fixed in rhpki-common 0:7.3.0-29.el4.
References
securityfocus.com/bid/30062
exchange.xforce.ibmcloud.com/vulnerabilities/43573
rhn.redhat.com/errata/RHSA-2008-0500.html
securitytracker.com/id?1020427
secunia.com/advisories/30929
Show 10 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=445227
nvd.nist.gov/vuln/detail/CVE-2008-1676
access.redhat.com/errata/RHSA-2008:0500
github.com/advisories/GHSA-6434-hff7-vgp8
redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0500.json
cve.org/CVERecord?id=CVE-2008-1676