rhpki-ca vulnerabilities (Red Hat)

46 vulnerabilities.

• rhpki-ca Red Hat Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System allow remote... CVE-2010-3869 4.0 MediumNovember 17, 2010
• rhpki-ca Red Hat Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require... CVE-2010-3868 5.8 MediumNovember 17, 2010
• rhpki-ca Red Hat The MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD)... CVE-2009-4901 2.1 LowJune 18, 2010
• rhpki-ca Red Hat Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC... CVE-2010-0407 Fix available 6.8 MediumJune 10, 2010
• rhpki-ca Red Hat The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15,... CVE-2010-0434 Fix available EPSS 18.4% 4.3 MediumMarch 5, 2010
• rhpki-ca Red Hat The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended... CVE-2009-3095 Fix available EPSS 13.5% 5.0 MediumSeptember 8, 2009
• rhpki-ca Red Hat The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the... CVE-2009-3094 Fix available 2.6 LowSeptember 8, 2009
• rhpki-ca Red Hat Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable... CVE-2009-2412 Fix available EPSS 13.8% 10.0 HighAugust 6, 2009
• rhpki-ca Red Hat The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion... CVE-2009-1891 Fix available EPSS 17.1% 7.1 HighJuly 10, 2009
• rhpki-ca Red Hat Directory Traversal in Apache Tomcat CVE-2008-5515 Fix available EPSS 18.7% 5.0 MediumJune 16, 2009
• rhpki-ca Red Hat Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big... CVE-2009-1956 Fix available EPSS 12.0% 6.4 MediumJune 6, 2009
• rhpki-ca Red Hat Exposure of Sensitive Information in Apache Tomcat CVE-2009-0580 Public exploitFix available EPSS 94.4% 4.3 MediumJune 5, 2009
• rhpki-ca Red Hat Apache Tomcat Denial of Service via Malformed Request Headers CVE-2009-0033 EPSS 10.1% 5.0 MediumJune 5, 2009
• rhpki-ca Red Hat The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7,... CVE-2009-1955 Public exploitFix available EPSS 53.0% 7.5 HighJune 4, 2009
• rhpki-ca Red Hat The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5... CVE-2009-0023 Fix available 4.3 MediumJune 4, 2009
• rhpki-ca Red Hat The verifyProof function in the Token Processing System (TPS) component in Red Hat Certificate... CVE-2008-5082 6.0 MediumJanuary 30, 2009
• rhpki-ca Red Hat Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA... CVE-2008-2368 2.1 LowJanuary 20, 2009
• rhpki-ca Red Hat Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified... CVE-2008-2367 2.1 LowJanuary 20, 2009
• rhpki-ca Red Hat The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context... CVE-2004-2761 Public exploit EPSS 10.1% 5.0 MediumJanuary 5, 2009
• rhpki-ca Red Hat Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0... CVE-2008-2939 Fix available EPSS 39.0% 4.3 MediumAugust 6, 2008
• rhpki-ca Red Hat Apache Tomcat Path Traversal Vulnerability CVE-2008-2370 Public exploitFix available EPSS 52.7% 5.0 MediumAugust 4, 2008
• rhpki-ca Red Hat Apache Tomcat Cross-site scripting (XSS) vulnerability CVE-2008-1232 Public exploitFix available EPSS 75.9% 4.3 MediumAugust 4, 2008
• rhpki-ca Red Hat The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the... CVE-2008-2364 Fix available EPSS 12.7% 5.0 MediumJune 13, 2008
• rhpki-ca Red Hat Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of... CVE-2008-1927 Fix available 5.0 MediumApril 23, 2008
• rhpki-ca Red Hat Exposure of Sensitive Information in Apache Tomcat CVE-2007-5333 Public exploitFix available EPSS 62.6% 5.0 MediumFebruary 12, 2008
• rhpki-ca Red Hat The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5... CVE-2008-0128 Public exploit EPSS 19.6% 5.0 MediumJanuary 20, 2008
• rhpki-ca Red Hat mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40... CVE-2008-0005 Fix available EPSS 14.7% 4.3 MediumJanuary 12, 2008
• rhpki-ca Red Hat Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2... CVE-2007-6388 Fix available EPSS 75.9% 4.3 MediumJanuary 8, 2008
• rhpki-ca Red Hat Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3... CVE-2007-5000 Fix available EPSS 46.6% 4.3 MediumDecember 13, 2007
• rhpki-ca Red Hat Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new... CVE-2007-4994 Fix available 7.5 HighNovember 6, 2007
• rhpki-ca Red Hat Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in... CVE-2007-5116 Fix available 7.5 HighNovember 6, 2007
• rhpki-ca Red Hat Apache Tomcat Path Traversal Vulnerability CVE-2007-5461 Public exploit EPSS 39.7% 3.5 LowOctober 15, 2007
• rhpki-ca Red Hat Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2... CVE-2007-4465 Fix available EPSS 26.2% 4.3 MediumSeptember 14, 2007
• rhpki-ca Red Hat The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a... CVE-2007-3847 Fix available EPSS 12.9% 5.0 MediumAugust 23, 2007
• rhpki-ca Red Hat Apache Tomcat Mishandles Character Sequence in Cookies CVE-2007-3385 EPSS 16.9% 4.3 MediumAugust 14, 2007
• rhpki-ca Red Hat Apache Tomcat treats single quotes as delimiters in cookies CVE-2007-3382 Public exploit EPSS 37.5% 4.3 MediumAugust 14, 2007
• rhpki-ca Red Hat cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a... CVE-2007-1863 Fix available EPSS 11.8% 5.0 MediumJune 27, 2007
• rhpki-ca Red Hat Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP... CVE-2006-5752 Fix available EPSS 27.8% 4.3 MediumJune 27, 2007
• rhpki-ca Red Hat Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a... CVE-2007-3304 Fix available 4.7 MediumJune 20, 2007
• rhpki-ca Red Hat Apache Tomcat XSS In Accept-Language Headers CVE-2007-1358 EPSS 19.9% 2.6 LowMay 9, 2007
• rhpki-ca Red Hat PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not... CVE-2007-1349 Fix available EPSS 10.4% 5.0 MediumMarch 30, 2007
• rhpki-ca Red Hat Apache Tomcat Directory Traversal CVE-2007-0450 Public exploitFix available EPSS 91.2% 5.0 MediumMarch 16, 2007
• rhpki-ca Red Hat http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache... CVE-2006-3918 Public exploitFix available EPSS 95.1% 4.3 MediumJuly 28, 2006
• rhpki-ca Red Hat Apache Tomcat Reveals Directories CVE-2006-3835 Public exploitFix available EPSS 48.1% 5.0 MediumJuly 25, 2006
• rhpki-ca Red Hat Apache Tomcat Vulnerable to Denial of Service (DoS) via Simultaneous Requests CVE-2005-3510 Fix available 5.0 MediumNovember 6, 2005
• rhpki-ca Red Hat Tomcat Vulnerable to Web Cache Poisoning CVE-2005-2090 EPSS 26.1% 4.3 MediumJune 30, 2005